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About This Guidebook 


This research project by Aric Toler, a contributor at RuNet Echo and Bellingcat, offers a series of guides, 
tutorials, and walkthroughs on understanding and conducting open-source research on the Russian- 
language Internet (RuNet). The primary focus of the project is providing instruction on the nuances of 
Russian-language research relating to the conflict in eastern Ukraine by using contemporary case studies. 
To show how these methods are useful in other conflicts, this project will also explore some similar open- 
source work being done on the Syrian conflict. The finished product will help readers learn how to 
understand and conduct such research. 

There are more Internet users in Russia than any other European country, yet there are no detailed guides 
or tutorials available to guide non-Russian speakers on navigating the wealth of open-source information on 
the RuNet. Many, if not most, of the guides will be accessible to those with little-to-no Russian skills, giving 
non-Russian speakers the tools and confidence to access information on the RuNet. 

The project helps researchers, journalists, and anyone interested in understanding more about the Russian 
Internet to verify sources and understand information found on Russian social media. It also provides some 
techniques for media forensics involving images and videos, including the different levels of verification 
needed for different uses: journalistic, evidentiary, as well as other avenues. 

The motivation for carrying out this project is to satisfy a demand among English-speakers for learning 
materials about carrying out and verifying open-source research on the RuNet. There is a wealth of 
information on the RuNet that is of interest to specialists, journalists, and the general public in the English- 
speaking world. There are currently no guides, however, that provide instruction for navigating and verifying 
these sources that differ from English-language counterparts. Important sources for research data include 



exclusively Russian-language social networks like Vkontakte and Odnoklassniki, along with others that 
function in Russian-language pockets on Twitter, YouTube, Facebook, and elsewhere. 

Open-source research can complement traditional journalism by generating leads and supplementing on- 
the-ground reporting. For example, the author of this project, Aric Toler, provided open-source research on a 
particular Russian soldier who fought in Ukraine to VICE News journalist Simon Ostrovsky to assist him in 
following his “journey” from his hometown to the battlefields of Ukraine (see “ Selfie Soldiers: Russia Checks 
Into Ukraine ”). In another example, open-source research from Bellingcat into the downing of Malaysia 
Airlines Flight 17 provided material for a 60 Minutes Australia investigation at the site of the tragedy. 

Each installment of RuNet Echo’s guidebook includes a detailed tutorial, accompanied by case studies, 
teaching readers how to conduct a particular kind of open-source research. 


How to Conduct Open-Source Research on the Russian Internet 


• So You Want to Conduct Open-Source Research 

These general instructions address specific ways to assess the reliability of photographs, videos, and human sources, with a 
special focus on the Russian Internet. 
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• What You Need to Know About Russian Social Networks to Conduct Open-Source Research 

Outside of the familiar English-language social networks of Twitter, Facebook, Instagram, and others, there is a handful of 
social media platforms used either exclusively or primarily in the post-Soviet world. 
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• Want to Research the Russian Internet But Don't Speak Russian? We Can Help. 

Conducting open-source research is especially challenging when you don't speak the language of your research topic. 

Thanks to the Internet, however, even these obstacles don't make it impossible. 
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• Unearthing Local Stories on the Russian-Language Internet 

While a lot of open-source research on the RuNet is possible thanks to broad Internet searches, sometimes it’s best to drill 
down to the narrowest sources available. 
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• Herein Lie the Secrets of Geolocation 

This guide will provide instruction on using satellite images, with a focus on historical imagery, and available street-level 
imagery accessible for Russian and Ukrainian cities. 
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• Triangulating Sources to Thin the Fog of War 

Even with the flood of information created and made accessible by the Internet, the fog of war is still thick. But it's not 
impenetrable. 
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How to Comb Russia's TV News 


This guide explains how to evaluate Russian TV news sources and navigate television networks’ online video archives, in 
order to compare coverage of specific events. 
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• How to Learn More About the Big Wigs and Public Officials in Russia and Ukraine 

There are numerous free and open information portals and databases available for researching individuals in Ukraine and 
Russia, whether you are investigating a public figure or a private individual. 
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• You've Read Our Open-Source Research Guidebook. Now Let's Use It. 

This ninth and final entry takes the tools and instructions we've been studying and applies them to a single case study: last 
year's wildfires in the Siberian city of Chita. 
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What we do: Global Voices reporters cover how citizens use the Internet and social media to make their voices heard, often 
translating from and to different languages. 


So You Want to Conduct Open- 
Source Research 



“Dreaming” by a4gpa. October 3, 2009. CC 2.0. 
Edited by Kevin Rothrock. 


Before diving into the specifics of 
investigating open-source data on the RuNet 
(Russian-language Internet), it's useful to 
understand the general verification processes that 
are applicable to all sources of open-source 
intelligence (OSINT). For a comprehensive 
treatment of the verification of digital open-source 
intelligence, you may want to see the Global 
Voices social media verification guide or 
the Verification Handbook , written by journalists 


from a variety of traditional media outlets, such as 
the BBC, and emerging projects, like Storyful. 

These general instructions address specific 
ways to assess the reliability of photographs, 
videos, and human sources. While most of the 
advice applies to any area, we focus specifically 
on Russian-language evidence and sources. 

Contents 

• Photos 

• Videos 

• Vetting Sources 

Photos 

There are countless ways to verify an image, 
depending on the various elements of the source. 
One of the most common ways to verify a 
photograph is by geolocating the image, which 
involves confirming or rejecting a photograph's 
location by matching visible elements to outside 
sources, such as road signs, topographical 
features, and landmarks. Another way to verify 
claims about an image is to verify the time that it 
was taken, either through seasonal differences (for 
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example, is snow visible in a photograph 
supposedly taken on the day after reports of heavy 
snow?) or specific times, by measuring observable 
shadows. These two verification methods— 
geolocation and “temporal” location— will be 
covered in extensive detail in a future installment 
of this series. 

As detailed in the two broad verification 
guidebooks cited in our introduction, the quickest 
way to verify a photograph’s uniqueness is by 
conducting a reverse Google Image Search or a 
TinEye search. Let's take a couple of Russia and 
Ukraine-specific examples to verify media content 
through these reverse image searches. 

As described by StopFake and other outlets, 
several pro-Russian and separatist media outlets 
have used decades-old photographs to depict what 
they claim are recent events in the the war in 
eastern Ukraine. For example, in the below article 
on the pro-separatist website RusVesna.su 
(meaning “Russian Spring”), a photograph of 
military equipment on fire is juxtaposed with a story 
about fighting in eastern Ukraine on June 25. The 
photograph is presented without context, and two 


logos are plastered onto it, including the Web 
address of RusVesna.su, implying that the site’s 
photographers recorded the image themselves or 
hold the rights to the photograph. 



rjiaBHafl > Hoboctm 

floH 6 acc ot6m/icji m OKpen: aHa/1113 CMTyaunn b HoBopoccmi no coctohhhk) Ha 25 

25 06 2014 - 21:38 

B rpaJKflaHCKow BOMHe Ha WpaiiHe npon 30 weji 
KopeHHOH nepenoM. KOTopbiw MeHaeT 
reonojniTHqecKyK) CMTyaqmo BOKpyr fOro- 

BocTOKa. 

AHajiMTHTMMecKMM OTfle/i ANNA-NEWS 

MCCJieflyeT MOTHBbl pOCCMMCKOrO pyKOBOACTBa, 
M36paBLuero nomiTMKy npaMoro 

' HeBMemaTe/TbCTBa" b co6brTna Ha Yi<panHe. 



This photograph, as many have pointed out, is 
actually from Tiananmen Square in 1989. A 
reverse Google Image search of this image will 
reveal this fact, when the search dates are 
restricted to resulted published before the 
Ukrainian conflict. 
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How do you conduct such a search? 


Go to images.google.com, and click the camera 
icon, in order to search by image: 




You may need to take a screenshot of the 
photograph you want to search. Either upload the 
photograph (a screenshot or the actual saved file 
will both work) or enter a URL that directly leads 
back to the image file (such as .jpg, .gif, .png— just 
not the entire webpage that hosts 
the image). When conducting a reverse image 
search, be sure to find the highest resolution copy 
available, as it will bring the most results. 


oogle 

Images 

Search by image x 

Search Google with an image instead of text. Try dragging an image here 

Paste image URL Upload an image H 

Choose File | No file chosen 


After modifying the search's date parameters, it 
becomes clear that this image likely comes from 
China and appeared online before the conflict in 
eastern Ukraine. 
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Google Bpl 9-53...-21 PM.jp g x 


0 4, 


Web Images News Shopping Maps More ▼ Search tools 


Search by image ▼ Jan 1, 2000 - Dec 1, 2013 ▼ Clear 


1989^-^^f 1? - nfc;Jc£J#- CGF - Powered by Discuz! 

I www.wargamehk.com/... /viewthread.php?. ▼ Translate this page 
JSJ lun 16, 2012 - 15 posts - 6 authors 

909 * 611 - CGF 3lffl:JStWiffitinyau1134 &16-6-2012 22:34 #££YouTube 
±85# '(*0)&fi?ISjiimi*Ht?.i -https://www.youtube.com/watch? 
v=S0Nxej26ZiQ lllfi 


KpyriHeiiLuafi MaiunHa b Mupe arm 6ypeHMH TyHHeneM ... 

I wordscience.org/krupnejshaya-mashina-v- . ▼ Translate this page 
] 90 * 90 - Aug 2, 2013 - BepTa. icpyrmeMiuan SypnnbHan MauiMHa Ann 
| TyHHenew (TBM), OHa Havana 6ypnTb nofl Cmotjiom bo btophmk. OHa 6wna 
co6paHa b nue paaMepoM 80 $yTOB ... 


WSHTMIW 

| blog.wenxuecity.com/. ,/frontend.php?.. ▼ Translate this page 
| 512 x 344 - Jun 3. 2012 - £***: fEft ^2012-06-03 

21:52:05. All lights combined to make this darkness. -Anna Kamienska, A 
Nest of Quiet-A Notebook Quantcast 


1989-08-17AK;B^--^tifilir/N-ra”^Mr^i ... -Xuite9|£ 

| blog.xuite.net/. ./162002901-1989-08-17. ▼ Translate this page 
P* iOO « 315 - Mar 7, 2009 - 31K(SH)*£ : ftSWifirA-n’XiRrttJnii* 
*a*+3e-A«#T5Efiamii»EA«^tt^JR8%E6 17%E6fe (ig** 


f]Tp - CGF - Powered by Discuz! Board 



www.wargamehk.com/.. ./viewthread.php? ... ▼ Translate this page 
909 * 611 - Jun 13, 2012 - 

AfcoR f fiA1lti(fi**«ft*mgoogle-Tttfcwikileaks(3gia5a#m 

HH**.bbc#rtE*«HR^aR 


TinEye works roughly the same as a reverse 
Google Image Search, but will usually return fewer 
results. The mechanisms are the same as Google 
Image Search, where you can either upload an 
image file or provide a URL. 


P§ TinEye search products 


LABS ABOUT 


Developers Contact us Register Log i 



There are various free tools that will analyze a 
photograph’s metadata and compression 
information, allowing further verification of an 
image’s veracity. The results are not always clear, 
however, and depend on the copy of the file 
uploaded. For example, a JPEG that has been 
resized, recompressed, and changed from the 
original file will have much less reliable data than 
the original full-resolution image recorded by a 
camera. Still, if you would like to try to analyze an 
image through ELA (error-level analysis) or its 
metadata, visit findexif.com . fotoforensics.com . 
and zitru . 

Instead of digital forensic tools, you can also rely 
on the naked eye. The easiest way to detect a 
Photoshopped image is by examining an image's 
shadows and reflections. The Moscow 
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Times . StopFake . and many others have noted 
that Russia’s Investigative Committee used a 
Photoshopped image of Donetsk in flames on the 
cover of a book entitled The Tragedy of Southeast 
Ukraine. When examining this image— which was 
also used in a news article on the site 
Politnaviqator.net — it is clear that the reflections in 
the water are incorrect. 



The incorrect reflections in the water are evident 
across from the rising flames, especially the 
leftmost column of fire and smoke. Note how a 
building is reflected in the water beneath the left- 
most flame, while the fire is not. As discovered 
by StopFake . the flames were artificially added to a 
normal picture of the Donetsk cityscape. 


Just as with many hoaxes in the English-language 
corners of the Internet, a simple reverse Google 
Image Search or critical eye can stop many 
falsehoods in their tracks. 

Videos 

Unlike images, there are no services available for 
reverse video lookup. This means that when you 
find a video, there is no fast solution for verifying 
its original source. However, there are still ways to 
carry out a reverse-verification of a video to see if 
supposedly new evidence is actually rehashed 
material. 

The closest thing to a reverse video search is by 
capturing a screenshot of the video at a particular 
moment, and then conducting a reverse Google 
Image search of that screenshot. Additionally, you 
can take a screenshot of the video’s thumbnail and 
reverse search it, hoping to find a copy of the video 
elsewhere on YouTube or another video hosting 
service. A more detailed description of how 
YouTube generates its thumbnails can be 
found here. 
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This video on Vkontakte . Russia's most popular 
social network, is titled “SHOCK!! July 19, 2014 at 
3pm, a BRUTAL shelling from a GRAD of the city 
of Gukovo.” The video, posted on July 19, 2014, is 
apparently from Russian state television 
channel Rossiya 2, and shows soldiers loading 
missiles into a Grad multiple launch rocket system 
and firing them. Without any specific identifying 
features, it is hard to verify the time, location, and 
original source of this video based on context clues 
alone. However, by taking a screenshot of 
particular moments in the video, we can find the 
original video source. 

The best places to take screenshots are the very 
beginning and very important or unique moments. 
The first video frame does not return any helpful 
results, but a screenshot of the moment of the 
missile launch yields multiple search results: 



ii 


LUOKM 19 mo/ifl 2014 b 15 nacoB >KECTOKMH o6crpe/i c TPA/Ja ropoaa rYKOBO 

Vasily Usikov 

I ^ Share + Add to My Videos More ▼ 


Added Nov 10, 2014 at 11:18 am from YouTube 

UioKupyioinee Bufleo nonano b cerb - conflaiu 3acHR/in o6crpen c rPAfla ropqqa 

TyKOBO. 

19 wo/m 2014, 15:00 
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Web Images News Shopping Maps More 


Search tools 


About 4 results (0.53 seconds) 


Image size 
622 x 466 


No other sizes of this image found. 



Pages that include matching images 
f pafl CTpe/ib6bi - YouTube 



www.youtube.com/watch7v... ▼ Translate this page 

640 * 480 - Oct 10, 2013 - ripaBunbHO paccyxcaaioT aMepw<aHCKMe 

cneL|MajnicTbi o Xojioahom Bomho. Ohs Hiixy/^a He AeJiacb b co3HaHnu 

BbICUJHX flOn>KHOCTHblX J~IML| ... 


6m 21 rpaA - KMHOTeaTp HD BiiAeo 

videodisc.tv/results/0000/GM+21+rpaA/ ~ Translate this page 
320 x 240 - Battlefield 2 homth BM 21 Tpa* PC30 6M-21 Tpa a BM-21 fpaA 



CeBepHyio Oceiwo HaKpbinn yparaH n rpaA - Vidashki.Ru 

vidashki.ru/7video Osetiyu. ~ Translate this page 
I 480 * 360 - MJ1P 9K51M "TopHaAO-r mh se 193 Mp6 (BnaAMKaBKa3) 

* | PoccMMCKMe BM-21 TpaA" flBa 3a^na OroHb BeAeT "ToMKa-Y" YparaH 

yHH'JTOJKeHMfl Bpara YparaH b ... 


5M 21 TpaA - Popular Video 

W allvideo. biz/search/2140854/BM-21-rpaA/ ^ Translate this page 
320 * 240 - BoopyweHHbiw KOH^jnmcr Ha BOCTOKe YKpaiiHw - 6oeBbte 
AeucTBua Ha TeppnTopnn /^OHeqKOH m JlyraHCKOH o6naciew YKpaHHbi c 
ynacTMeM apMencKMx ... 


Following the first link gives us a video uploaded in 
October 2013 of Russian soldiers conducting 
training exercises in 2009 with the Grad multiple- 
launch rocket system. Clearly, this video does not 
show Ukrainian soldiers shelling Russia on July 
19, 2014, as the original user claimed. 


Once you verify that a video is unique, the location 
and time of the photograph should be verified to 
greatest extent possible. In April 2015, wildfires 
ravaged much of Siberia, including the region 
known as the Zabaykalsky Krai. A video emerged 
on YouTube and Russian social networks, 
including Odnoklassnki . showing a hellish scene of 
cars driving through thick smoke. Reverse image 
searches did not reveal any duplicates of this video 
after it was posted on April 14, meaning this video 
could not be verified debunked using this method 
alone. The time stamp on the video itself 
checks out, showing April 13, 2015; however, this 
information could be modified or digitally added, 
and is thus not a reliable means of verification. An 
inspection of the license plates in the video 
showed that the code was 75 (top right, after HK): 
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Cross-referencing the license plates codes in 
Russia shows that this code is indeed local to the 
Zabaykalsky Krai, lending additional credibility to 
the video. Additionally, the user who uploaded the 
video to YouTube has one other upload from 
months before the wildfire video — a local news 
broadcast segment for Khakassia, located not 
far from the Zabaykalsky Krai. With all of these 
factors combined, there is no open-source 
information available that leads us to think 
this video was fabricated or falsely represented. 


Vetting Sources 


Verifying the reliability of sources on social media 
is not too different on the RuNet than it is with the 
rest of the Internet, but there are some special 
considerations one should make. While there are a 
number of “bots” that send out identical tweets in 
every language, there is an especially large 
concentration of them on Twitter writing 
in Russian. This trend is particularly true with 
politicized events, as both pro-Ukrainian and pro- 
Russian headlines are spammed across hashtags 
and keywords, making open-source investigation 
more difficult. 

In the screenshot below, we see that an identical 
tweet has been sent by dozens of Twitter bots at 
the same time. The tweet reads “A source says 
a bomb threat has been called in at two hotels in 
Moscow,” with a number of people with generic 
Russian names spreading the information. 
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£ guA d9S8yoni£Gor1iBMg hnroC NNH9ia3 

saxooM a xbjjnhntooi xyaA a BnxNHeoa caidqca ccoqiY xnhpotoN 


otorlq W9iv 



otorlq W9iv 


£ guA gni>lDb9flj2Yofl xyhhgmnuj cqcn 

9axooM a xbpnhntdoi xyaA a BnxNHeoa caidqca ccoqiY :xnhfot3N 




otorlq W9iV 


£guA uamoOllBwiriDqA' NNXoaoMTy3 NNH9ia3 

98X30M a xsjJNHNTOOi xyaA a BRXNHeoa caidqca ccoqiY :>inhfot3N 1 VI 

% U Aii 


otorlq W9iv 


£ guA snoooiSorlqqAC xnhmoxcS chR 

9ax3oM a xbjjnhnt 301 xyaA a BnxNHeoa caidqca ccoqiY :xnhpot3N 



otorlq W9iv 


£ guA teElJnEfl_9}Ei>K RCX080H6)KO>I RdRETCH 

9ax3oM a X6JJNHNT301 xyaA a BnxNHCoa caidqca ccoqiY :xnhpot3N 



otorlq W9iv 


£guA x9at39J lEnsiTC: PNaoqoiNql cuicO 

93X30M a X6JJNHNT301 xyaA a BRXNHeoa caidqca ccoqiY xnhpotoN PI 


£ guA ninLnO_9VEi8 HGHcqO, rtocH 

9ax30M a X6/JNHNT301 xyaA a srmNHeoa caidqca ccoqiY :xnhpot3N 


otorlq w 9 iV 


otorlq w 9 iV 


£ guA ib89Vmyl8i9Tc HNa9qexy>l eqCH 

93X30M a X6JJNHNT301 XyaA 8 6IDINH£0a Caidqca ccoqiY XNHPOT3N 



otorlq w 9 iV 


£ guA e3etbisyiDmu89TCi esi>l 9beldiosefl 

9ax30M a X6JJNHNT301 xyaA a 6nxNH£oa caidqca ccoqiY »nhpot3N 



olorlq woiV 


£ guA £8€ro>lquflivEoJ cqTOC RH9# 

9ax30M a xbjjnhntooi xyaA a 6rwNH£oa caidqca ccoqiY »nhpot3N 



This bomb threat did actually take place , but these 
bots are not reliable sources of information. So, 
how do you find out if a source is a real person, or 
just a bot? Other than the context clues of the 
account’s tweets, such as sending out thousands 
of tweets with only a handful of followers, you can 
reverse image search the user's avatar. 

Most bots and other unreliable sources— both in 
Russia and elsewhere— will use stolen 
photographs of other people as their avatars. For 
the Twitter bot @PatnietecnAmwa (or “Mashka 
Ya,” indicating that the woman’s name is Mariya), 
a quick investigation of the account's avatar 
reveals that the Twitter account is likely not 
operated by a human. 
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Maui 

@Patnw 

nepBbiti 

nenoBef 

CMenoc 

9 TpyJ 


Open link in new tab 
Open link in new window 

Open link in incognito window 

Save link as... 

Copy link address 

Save image as... 


Copy image URL 


Copy image 
Open image in new tab 
Search Google for this image 
Print... 


TWEETS 

3,118 


FOLLOWERS 

11 


FAVORITES 

5 


Inspect element 


Tweets & replies Photos & vide 


Maiuxa 9\ )PatnietecnAmwa 40m 

flBa MenoBexa norn6nn b PJH c aBToSycoM 
dlvr it/C4Q1vW 


Maiuxa 9\ laPatnietecnAmwa 40m 

Bo OpaHMMM OBaKyiipoBann 8 twcbm MenoBt 
aBna6oM6 dlvr it/C4Q14N 


Maiuxa @PatnietecnAmwa - 40m 

B pe3ynbTaTe MaccoBoro flTfl b LUBertLtapM 


After copying the URL of the avatar (or just clicking 
“Search Google for this image” in the Chrome Web 
browser), paste the link into a reverse Google 
image search to find similar pictures elsewhere 
online. 


Web Images News Shopping Maps More ▼ Search tools 


About 1 results (0.38 seconds) 

Image size: 

400 * 400 

No other sizes of this image found. 



Pages that include matching images 
Dasha Makarova's photos | 2 albums | VK 

vk.com/albums124786293 ▼ 

f * JP 282 * 604 - Dasha’s profile photos. 3 >»Tojibxo R<«. 6. mm. Show all 2 
flBl ' albums. 2011. Show more photos, about help terms peoplecomm unities 
developers VK © 2015 ... 


Here, we see that the avatar of “Mashka” is 
actually a woman named Dasha Makarova, and 
that the Twitter user’s avatar was almost certainly 
stolen from the woman’s VKontakte page. 

To find the original source of this tweet, search the 
headline on Twitter and find the first person who 
tweeted those exact words on the day of the flood 
of bot tweets. The original source of this tweet 
comes from @_ainequinn, a more reliable user 
than the other bots, as he has over a thousand 
followers. 
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IflByX rOCTMHMLjaX B MOCKBe 




TWEETS 

5,262 


FOLLOWING 

0 


< rOCTMHMLiaX B MOCKBe 

FOLLOWERS 

1,197 View photo 



CBoeofla BwGopa - sto, Korfla He Te6e 
npeflocTaBMJin cboGoay BbiGopa, a Tbi 
npeflocTaBMR ee! 


< rocTMHmjax b MocKBe 


BmeK MuxaMfi 

@_ainequinn 


View photo 



However, we still must verify the information in this 
tweet, even if the source seems to be reliable. The 
photograph shared by this user shows a scene that 
seems to fit the situation: emergency responders, 
a bomb-sniffing dog, and a truck with the 
word “MOSCOW” (MocKBa) on its side. A reverse 
image search reveals, however, that this 


photograph is commonly reused in reports 
about emergency responses in Moscow, appearing 
in various news stories as far back as 201 1 . 


Pages that include matching images 


flBe TbICflHM MeJlOBeK BBaxykipOBaHbl M3 TI4 B nOflMOCKOBHOM ... 



ria.ru/incidents/. ./1 069951831.html ▼ Translate this page 
600 x 340 - Jun 14, 2015 - Ha MecTe pa6oTaioT KMHonom. ToproBbiM neirrp 
HaxoflMTca b patioHe BToporo KMnoMeTpa BHewHeM CTopoHbi MKAfl. KHHonor 
c co6aKOH 


flBa TPK SBaKyMpytoT b neiep6ypre M3-3a 3bohkob 0 ... 

ria.ru/incidents/. ../1 054388299.html ▼ Translate this page 

600 * 340 - Mar 25, 2015 - ... Ha flonroo3epHOM y/iwpe b CaHKT-rieTep6ypre 

3BaKyHpy»OT M3-3a 3BOHKOB O MMHMpOB3HMH. MfleT npOBepKa nOMeLqeHMM. 
KwHonor c co6aKOM 


fleHb KMHonorMMecKMX noApa3fleneHMM MBfl Poccmm. CnpaBKa 



ria.ru/spravka/20l 10621/390638406. html ▼ Translate this page 
600 x 340 - Jun 21, 201 1 - Km Honor c co6aKOH y 3AaHMfl Poccmmckom 
rocyaapcTBeHHOM 6n6nnoTeKM ... B Poccmm Mcnonb30BaTb co6ax 
cny>x6bi b nonML^MM CTanM c ... 


ripaBooxpaHMTenM He HaumM 6oM6y b mockobckom TL4 ... 



ria.ru/incidents/ . 71 001 20531 7.html ▼ Translate this page 
600 x 340 - Mar 26, 2014 - KMHonor c co6aKOM ApxMBHoe <£oto. © PHA 
Hoboctm. BnaAMMMp OeAopeHKO | KynMTb MnniocTpaL^Mto. MOCKBA, 26 Map 
— PHA Hoboctm. 


floHTM Tbicany ne/ioBeK 3BaKyMpoBanM M3 TL| "EpeBaH flna3a" 



ria.ru/incidents/.. 71 001 200608.html ▼ Translate this page 
600 * 340 - Mar 26, 2014 - KnHonor c co6aKOH ApxMBHoe <J)OTO ... 
ripoBOAMTca 3BaKyapMH, Ha MecTe pa6oTaioT KMHonorM ", — CKa3an 
co6eceAHMK areHTCTBa. flpMMepHO ... 
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While the more human-seeming Twitter account 
appears to be a more reliable source of information 
than a horde of bot accounts, the photograph that 
accompanied the tweet is generically used and not 
truly from the scene of the bomb threat. Thus, as 
we see from these examples, it is always 
necessary to verify specific pieces of information 
using all available means. 

The next installment in this guidebook will be 
an introduction to Russian social networks and the 
unique Russian and Ukrainian usage of Facebook 
and Twitter. 
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What You Need to Know About 
Russian Social Networks to 


Conduct Open-Source Research 


o 


Image created by Kevin Rothrock. 



Outside of the familiar English-language social 
networks of Twitter, Facebook, Instag ram, and too 
many more to name, there is a handful of social 
media platforms used either exclusively or 
primarily in the post-Soviet world. While the 
instructions and tips laid out here are meant 
specifically for Russia's homegrown 
social networks, the general approach is the same 
for research conducted on any such website— 
especially regional networks. 


Contents 


• VKontakte 

• Odnoklassniki 

• Moi Mir 

• VKontakte (or VK, which means “In Contact”) 
is by far the most popular social network in 
Russia. The layout is basically the same as 
Facebook of years past, but with added 
quirks and a heavy dose of pirated content. 

• Odnoklassniki (“Classmates”) is the second 
most popular platform in Russia. The 
demographics for this service tend to skew 
older than other services, but it's still 
immensely popular. 

• Many Russians and Ukrainians also maintain 
profiles on Moi Mir (“My World”), a service 
operated by Mail.ru. Accessing information 
on a stranger’s Moi Mir account is more 
restricted than it is with the other services 
listed here. 

VKontakte 

VK is by far the most important and popular social 
network in Russia and Ukraine. The same is true 
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in Belarus, Kazakhstan, and other Russian- 
speaking former Soviet states. In 2014 . there were 
more than 60 million VK users in Russia, 
compared with only 10 million Facebook users. 
Learning the ins and outs of this social network is 
essential in conducting open-source research on 
the RuNet. 

Because you need to have an account on VK to 
access much of the information available on the 
website, you should register an account, if you do 
not already have one. If you are using VK purely 
for monitoring and research, there is no need to 
enter your real name or personal details— all you 
need is a valid phone number to receive a 
confirmation SMS. 


MC 


Phonr or rmad 


Password 


Welcome* 

VK ts te largest European sooal network writ) more than a 100 mAon active users. 
Sign up for VK 


Log 


Babyten 


Forgot you password* 


Tatarsky 


Sgni4> ► 


f Sgn n with Facebook 


What can you do on VK? 

■ Find people with whom you've studied, worked or met on vacation. 

■ Learn more about people around you and make new friends. 

■ Stay n touch with loved ones. 



about terms people commurebes developers 
VK 9 2015 Englsh Pycoow yKoamcwca al languages- 


You must have a way to receive an SMS 
message to confirm your account. 
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Account vabdation 


For security reasons we wfl now send 
an activation code to your mobie phone. It is free. 


Country 
USA (+1) 

Mobile number 

+ 1 | 


Get code 


Your number is not displayed anywhere on 
the site and wfl only be used as a logn. It is 
free. 

Phone number example: +1 000 0000000 



The account-setup process is very similar to 
Facebook's, with user-inputted personal 
information, pictures, a place for “posts” (similar to 
a Facebook timeline), and a list of friends. Note 
some of the highlighted sections in the image 
below, which are of use when tracking Russian, 
Ukrainian, and separatist soldiers, for instance: 

• In the top right, there is a “last login” feature, 
which is not on Facebook. There is no way 
to see the location of the last login, however. 


• The military service information is also 
unique to VK, when compared to Facebook. 
Many soldiers and veterans will have 
numerous battalions and groups listed here. 
Russia has military conscription for young 
men, and many (but not all) men will have 
some military experience, whether it is listed 
on VK or not. Contract soldiers will often list 
multiple military units in which they served, 
possibly with both conscripted and 
contracted units. Additionally, soldiers will 
often join public groups for their military unit. 

• Click “See AN” next to photos to see all of a 
user's albums and profile pictures in one 
place. 
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Vladimir Zhirinovsky 



Vtadimn 


Vladimir 



Mawn 

BaUmo* 


Chernydiov 


■ 

Andns 

Mai 





Hornet oum: 

Aana-ATa 

Petationsfep status. 

Mamed 

Studcd at: 

Mry*7o 


hade full information 

roatact ■kfomutHMi 


| | 


Htp:ffaw*Mpr,rm 

Fttps V ,’twntter .conVZhmnovshy 

http: / (WirtapiaoLceaVtfchnovilBy 

t^:/r^.m*d.fi^meilfthrmerv»kyvvf 

Education 


Ctlaft ar university 

MTV 70 

Depart merit: 

hWTwrvr rrpan Asmh m Aopvav 

CcBepe er university: 

MTy 77 

Department: 

Cpmumecne* 

Befcth 


t PotitKlt nitwt: 

Uborai 

Penoaal wlocmet r*n 


Actmbes: 

rVoep napTM* Hflnp. fleryraT rocyjMpcraeHMOiJ 
Aytiu Oeftepananoro Co6pam»s Poccmaoun} 
depepasaw VI cosaiea 

Favorite quotes: 

B Poccioo, a Pocoao aceri cepouen onctnet* a 

M C Mew OCT«»*VCb lenBMyetr 1 

'Group*: 

Harp nM6epanb«o-aetio«paT»e-ecMB rapivw 
poccKH, 1 tfcnMSucwoe perwMartmoe otaerei wt 

f\0np, Oncjtoe perno*ian*Hoe omeneMHe hfihP 55, 
r>pt*omawcaMM wwnw ryjnp 

Miktory Service 


BranctvUnd: 

non»nw-e<«oe vrp*en**«*« uirafta Iamo^akhoto 


leanore evpvra 


Geor^a. 1979-1972 


Paud 

Durov 


Ai«r, 

Older*® 


Vasily 


93d photos 


1 frt* 





Andns 





vtadmw /hmonky 


The search functions on VK are much more robust 
than on Facebook, and very easy to use. If you 
were to look for soldiers from Pskov, Russia 
serving in 2014, the search parameters below 
yield numerous results: 



hr Hnufa 
hr Communities 


My F 
Mr Settings 




114 people found 


% 

er 


Alexander Tevzalic 



Anttodi UMverUty • LA Campus 






Relatmiistiip statin 

Choose • statu* 

W4h phono 





Yaroslav MirtyiKlmk 

Collaoe ArpaT wn aooel koiuoo* <6weu». noCT) 
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You can also use more advanced options in 
specific cases, to narrow your results to show just 
users with certain kinds of employment, military 
service, or education, past or present. For 
example, if you wanted to conduct research on 
corruption in Kyiv, you could search for specific job 
titles, such as civil clerks, police officers, judges, 
and so on, then scavenge the available open- 
source information to find signs of conspicuous 
wealth or lavish trips. 

In the example below, the search parameters are 
set for residents of Kyiv who list “police” (mmjimumfi) 
in their employment field. 


201 people found 



Sanya Bely 

HABfl (KHVIYJ) 


Add to fnends 


Lama Goebachenko 


Add to fnendt 


Bodya Shapoval 

vwc (yrAy) 


Add to friends 



Masha Dedekaeva 

rpyma noaoepxio* mkttmuhk 


Add to fnendt 




Alridmlrr Vovfc 

CytCy(Cywfly) 


Add to fnendt 



By rating w 

Region 


Ukraine 

W 

Kiev 

W 


School 

Choose a school 

Colepe or unluersfty 

Choose a university 

Ape 

From w - To 

Sex 

Female 
Male 
(• Any 

Relationship status 

Choose a status 

✓ With photo 
Online now 

Personal * 

Religious wews 
Personal Priority 
Important in Others 
Views on Smoking 
Views on Alcohol 

Company * 



Position 
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Of course, not every one of these results will be 
police officers. For example, one search result is 
someone who is part of the “Group for the Support 
of the Police,” and is likely not an actual police 
officer. Additionally, there are hundreds of other 
police officers who are simply not on VK, or did not 
list their job titles in searchable fields. If you're 
looking for someone who isn't discoverable using 
this kind of search, it's important to track networks 
of contacts (partners, relatives, colleagues, and so 
on) who might provide more information for your 
research topic. 

Odnoklassniki 

Odnoklassniki is the second-most popular social 
network in Russia. Like VKontakte, Odnoklassniki 
is very popular in post-Soviet, Russian-speaking 
countries, including Ukraine, Kyrgyzstan, 
Uzbekistan, and Georgia. In 2014, Odnoklassniki 
had around 40 million registered users in Russia 
and 65 million in total . The service's users 
are typically older and more likely to be 
women than any other Russian social network. 


Registering for Odnoklassniki is a bit easier than 
VK, since you do not need to provide SMS 
confirmation. However, unlocking extra account 
features requires SMS confirmation. 



Registration 


Name 
Surname 
Date of birth 
I'm 

Country of residence 
City 

E-mail or username 
Password 


Babylen 

Tatarsky 


1 ▼ July ▼ 1987 ▼ 


$ Male C> Female 


USA 


New York 


By cfectang S*jn up. you agree to our Uoente Agreemerit 


Signup 


Hefe 
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After registering, you will be greeted by the home 
page, which looks quite a bit different than VK 
(and, by extension, Facebook). 


♦ *»*•« poxnm! Bedro SOW A* noop—o 


Babylen Tatarsky a*.,* New York USA 

Home Frtendso Photos o Groups o Games o Posts o Gifts Other t 


None of your frteMi ■ 



■ SendegM 
£ Fnd fewnOt 
m tribkt Fiend* oMy mod*' 
M. Enable ImnMe mode 
O SHtag* 



Where to start? 

Start with a eking your I nonets and lamfy colleagues schoolmates 
and other people you rreght know* 


Find friends 


Trending videos 



Odnoklassniki is unique among modern social 
networks in that it provides users with the identities 
of people who visit their accounts pages. 

Therefore, if you are trying to conduct a discreet 
open-source investigation, it is important either to 
search anonymously, or to “Enable Invisible 
Mode.” 



None of 
at the nr 



■ - 

• 

Babylen Tatarsky 

o 

Top up balance 

£ 

Enable Triends only ... 

JL 

Enable Irrustte mode 

o 

Settings 

© 

Help 

B 

Log out 


I 


Browsing Odnoklassniki anonymously, however, is 
not free— it costs “OKs,” a sort of digital currency 
on the site. 
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Invisible mode 


JL 

L. A 


The ability to visit other users profiles and stay completely invisible 
Invisible mode for 50 days costs 100 OKs. Select Different Period 


Ordering 1 00 OK 


Proceed to payment 


OK 


100 OKs, which allows 50 days of anonymous use, 
costs 100 rubles (not even $2). You can buy these 
credits with a variety of payment methods, 
including credit cards. 

Like VK, Odnoklassniki has a robust set of search 
parameters: 


People Groups Games Muse 


Nctoy Novgorod Ruwu K P«ef 
3 510 users found 


* Orvfef 







I1UA. 

Al per venal photo* 3 



from v — to * 

Scare* by Ire dale of brth 



Near vork. USA 


Elf } a. 


Russia 

Nizhny Novgorod 

* School 



AJ peiwnai pholoa 11 

* Organ nation 

■ 

morale or garwaior * 



Li 


Moi Mir 

The third-most popular Russian social network 
is Moi Mir , an offshoot of the Mail.ru web service, 
not unlike the relationship of Google-i- to Gmail. As 
of 2014 . Moi Mir had about 25 million Russian 
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users— roughly the same number of active 
Russian Facebook users in the same year. 

Moi Mir users set up their accounts through 
a Mail.ru e-mail address. As with Odnoklassniki, no 
SMS verification is required to complete 
registration on Moi Mir: 


• • KAniA KAIAD To s *9 n in t0 M y World you need a Mail Ru mailbox 
U Registration is free and won’t take long 


First Name Babylen 
Last Name Tatarsky 
Birthday |1 *] [July 

Gender Male % Female 

Mailbox babylen tatarsky 
Password 

Retype Password •••♦«••• 


1 ✓ 
I V' 

1987 ♦ ✓ 

✓ 


| QmaM.ru ▼ | ✓ 

| Password strength: Medium 


Password Recovery 

You can use your phone to recover your password 

Enter your phone number and a confirmation code will be sent in a text message within one 
minute 

Mobile Phone Canada ▼ |*| + 1 ] optional 


1 _do_ n _t 'Rave a mobile phone_ 


SignUp 


By clicking "Sign Up", you accept the terms and conditions of the User Agreement . 


After selecting “Join now” on the signup screen, 
registration for a Moi Mir account is complete. 



As with Odnoklassniki, optional account verification 
via SMS will unlock a Moi Mir account's 
full features, but this isn't necessary to use the 
site's basic features. 

The search functionality of Moi Mir has many of the 
same features as VK and Odnoklassniki, but it is 
clearly aimed at being more of a dating site. Many 
of the search parameters are based on physical 
appearance, or (in what is likely unique for any 
social network) the user’s “Chronotype,” signifying 
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when someone typically wakes up and goes to 
sleep. 


Q Frst name last name, or email adress 



Hemjeecmo HemoecrMo 

Poccms TaTapcTan Kasanb 33 years 

Add friend Write £ 


Sex 


County Poccm* 
Region Ta rape ran 
Cit, KasaHb 
Steer 
Age 



Pouaw PoMaH • v*aed n Octoew 

Poccms TarapcraH KasaHb 37 years 



Add friend Write 



KweeneB Hmwtphh • 6 octobw 

Poccms TatapcraH Ka3a*b 




Add friend Write 



Roman Perov • vtted 9 Ociot*» 

Poccm* TaiapcraH KasaHb .39 years 


68 


O Searching 
School 

University/college 

College 

Height 

Weight 

interests 

flonofiHMteribMo « 

Hair color 
Physique 
Family 
Alcohol 
Smoking 
Eye color 
Zodiac sign 
Birthday 



Mrtitary service 
Children 
Location 
Chronotype 


As you can see from the screenshots above, you 
need to be able either to read Russian or to copy 
and paste in Russian city names to search users 


based on location, as the site is not accessible in 
English. 


These three social networks are the largest such 
websites specific to Russian and post-Soviet 
users, but Russians also use Instagram, 

Facebook, Twitter, and other sites. There has been 
continued Russian-language growth on these 
networks from all angles, whether we're talking 
about the strong community of anti-Kremlin 
opposition users on Facebook, Chechen leader 
Ramzan Kadyrov's infamous antics on Instagram . 
or popular pro-Kremlin Twitter accounts . If you 
want to conduct research using the networks 
with the largest numbers of ordinary Russian 
speakers, however, you need to gain some 
fluency in using VK, Odnoklassniki, and (to a 
lesser extent) Moi Mir. 
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Want to Research the Russian 
Internet But Don't Speak Russian? 
We Can Help. 


It 


rr A 





Vo 

A* 



“Help.” Photograph by Ali Moradi, April 20, 2010. 
Halifax, Nova Scotia. CC 2.0. Edited by Kevin 
Rothrock. 


Conducting open-source research can be difficult, 
and it’s even more challenging when you cannot 
read or write in the language of your research 
topic. Thanks to the Internet, however, even these 
obstacles don't make it impossible for people who 
don't speak Russian to conduct such research in 
Russian. To do so, you need to have equal parts 
patience and technical knowhow in navigating 
search algorithms and translation tools. This guide 


identifies and explains free resources that allow 
you to conduct Russian-language open-source 
research without knowing the language. Here you'll 
also learn how to navigate search algorithms on 
Google and Twitter to retrieve usable information. 

Contents 

• Google Translate 

• Abbreviations and Acronyms 

• Searching in Russian 
Google Translate 

If you have little or no Russian language skills, 
then translation software is an absolute necessity 
for conducting research on Russian open-source 
information. Google Translate is the most versatile 
tool for translation, offering many features you 
likely know about already, along with some others 
that might be less familiar. 

The normal translation function of Google 
Translate is certainly already obvious to you— copy 
and paste in Russian (or type in English) text, and 
receive a translation. You can also enter a 
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website’s URL into the translation box and see the 
entire page translated into any given language. 


If you have trouble reading the Russian alphabet, 
Google Translate's “drawing” function, which 
allows you to outline letters using your mouse or 
trackpad, converts the sketches into editable, 
translatable text. See below for an example with a 
MarHHT (“Magnit,” meaning “magnet”) supermarket 
storefront: 



As you draw your text, Google automatically 
suggests editable text to match your sketch. 
Sometimes the first suggestion isn't always correct, 
so be sure to review the options. 

In an especially useful feature, Google's tool can 
also recognize cursive handwriting, which 


can greatly differ from printed Russian text. Below, 
the phrase ao CBUflaHna (“do svidaniya,” or 
“goodbye”) is successfully rendered into type by 
Google’s handwriting tool: 



Abbreviations and Acronyms 

As with English, there are a seemingly endless 
number of bureaucratic acronyms in Russian, and 
the website Sokr.ru helps navigate many of these 
puzzles. For decoding location-specific language, 
especially useful is this Russian Wikipedia entry , 
which lists the common abbreviations for various 
localities in Russia (cities, towns, villages, and so 
on). 


For example, the following text is found in the title 
of a video on VK . put out by a pro-separatist video 
channel. Using the two tools outlined above, it's 
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possible to decipher the information, even without 
speaking Russian. 

r.floHeuK JleHMHCKMM p-H o6cTpe/i PC30 
“YparaH” 

There are three abbreviations here, all of which are 
very common among videos related to the 
Ukrainian conflict: 



1 . r. flOHeuK: The first listing for “r.” On Sokr.ru 
brings up “ropofl” (city), which is also the 
second entry on the Wikipedia page listing 
abbreviations. This describes the city of 
Donetsk (floHeuK). 

2. JleHMHCKMM p-H: Both the Sokr.ru website 
and Wikipedia say this means “paMOH” 
(region/district) for this abbreviation. This 
describes the Lenin (JleHMHCKMM) district. 

3. PC30: This has nothing to do with towns, so 
we must rely on Sokr . which tells us that 


this acronym is short for “peaKTMBHan 
CMCTeMa 3a/inoBoro oma / paKeTHaa 
CMCTeMa 3a/inoBoro oma” (reactive system 
of volley fire / rocket system of volley fire). 
The English equivalent to this is “multiple 
rocket launcher system” (MLRS), which in 
this case refers to the Uragan (“Hurricane”) 
MLRS. 

Therefore, the title of the video is “City of Donetsk 
Leninskiy district shelling MLRS ‘Uragan’” 

Searching in Russian 

In English, words rarely change based on their role 
in a sentence, but they occasionally will add a 
letter to indicate count or possession (soldier, 
soldiers, soldier’s, soldiers’), or in the case of some 
pronouns to indicate subject or object (who or 
whom, he or him, she or her, and so on). 

Things are not so simple in Russian, as there are 
about a dozen forms for each word (indicating 
singularity or plurality and case), and 
several different conjugations of verbs. Depending 
on its role in the sentence (subject, direct object, 
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indirect object, plural, plural direct object, and so 
on), the word “cat” can have the following nine 
declined (changed) forms: KOLUKa, koujkm, KOLUKe, 
KOLUKy, KOLUKOM, KOLLieK, KOLUKaM, KOLUKaMM, 

KOLUKax. Making things more complicated, each of 
these spellings returns different results in a Twitter 
search— for example, the simple “cat” or “cats” 
forms of the noun will bring back far more results 
than advanced searched for “with a cat” or “with 
cats.” 

Wiktionary provides the declined forms for most 
words in its Declension section, along with verb 
conjugations. For example, the Wiktionary entry for 
KOLUKa (cat shows the singular and plural forms for 
each of the six Russian cases. When carrying out 
searches, be sure to remove the accent mark (the 
small mark on the 6, as seen inxowKa) from the 
letters by pressing backspace in front of the 
accented letter. 


Noun [edit] 

Koiuita • (koska) famm 

1. cat 

*HTb KaK kolli Ka c coOaKOM — 2 it' kax koska s soo ako/ — to lead a cat-and-dog life 
HrpaTb b koujkm MbiujKH — igrat' v koski-myski — play cat-and-mouse 
HOHbio see koujkm cepu — nod'ju vse koikl sery — at night all cats are gray 

y Hero koujkm CKpeOyT Ha cep/me — u nego koski skrebut na serdce — he is sick at heart (very upset) 

2. cat-o'-nine tails 

3 ( technical ) grapnel, drag 

4. (technical) grappel fork 

5. (cranes) car. trolley, carriage 

6. ( geology ) spit, bar 

7. (in the plural) climbing irons, climbing grapplers 

Declension [edit] 


Declension of Kouixa 


[h«je a] 


singular 

plural 

nominative 

KOUIKa 

KOUJKM 

koska 

ko&ki 

genitive 

KOUJKM 

KOUJOK 

koiki 

kosek 

dative 

Kouace 

KOLUKaM 

koske 

koskam 

accusative 

KOtury 

Koujer 

kbiku 

koiek 

instrumental 

KOIIIKOM . K0UJK0«0 

KOLUKaMM 

koSkoj. kdSkoju 

koskami 

prepositional 

KOLUKe 

Komrax 

koske 

koskax 


When searching on Google, this is not much of a 
problem, as the search algorithms are able to 
include many of the forms of a word in its 
searches. (When you enter the Russian word for 
cat (KOLUKa) in a search, relevant results that 
include the declined forms— cats, to a cat, of a cat, 
on a cat, etc.— will also come up.) Therefore, 
unless you put the word in quotation marks to 
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specify the results, there is no need to worry about 
noun and verb forms when searching on Google in 
Russian. 

On Twitter, however, it’s a different story. Twitter 
can only return results for the exact letters given, 
and is not able to detect changes in verbs (such as 
“run,” “ran,” “runs”) or nouns. 

If you were trying to find out information about the 
evacuation of a building in the city of Kazan, you 
can get drastically different search results, 
depending on the word forms you enter in your 
search. For example, try two searches with forms of 
the verb “ 3 BaKvnpoBaTb” (to evacuate) with the 
search strings of Ka3aHb (normal form of “Kazan”) 
and b Ka3aHM (“in Kazan”). 

1 . SBaKynpoBaTb Ka3aHb - Evacuate Kazan 
(no changes to verb/noun forms): 

Searching Google News, the results include 
various forms of both Kazan and Evacuate, but it 
will also bring back the noun “evacuation” 
(3BaKyauMH) and adjectival form of Kazan in 
various declensions: 


OOglc 3BaKyMpoeaTb Ka3aHb 

Web News Videos Maps Images Mom - Search tools 



About 68.900 results (0.43 seconds) 

B MexcuKe Hasanacb aBaxyauM* 50 Tbtc nenoeeK M3-3a ... 

B TaTap-MH$opM - 13 hours ago 

no croeaM HapMOMa/ibHoro KOopflMHaTopa cny*6bi JlyMca Oenwne 
RyawTe b urraTax Xanncro Haaptfr h KonuMa anacTM naviami 

3MKyai|Nio 


• HapyrneHHe npaenn nepeeo3KM KpynMora6apMTHbix m ... 
Ka3aHCKHH riopran - Oct 19, 2015 

EcnM aBTOMo6«nb ^eMCTBirrenbHo aeaxyMpoBanM onepaTop 
flMcneTviepcKOM cnyw6bi B KaaaHN ecTb Tpw urrpa<t>CTOHHKM - Ha 
Aflenn Kyiyn 



floxTop JlM3a npMBe3na 16 fleTeia M3 floHeqKOM obnacni Ha ... 
BepcHH com - 9 hours ago 

m npoAyKToe nmaHHfl e 6onbHMLp. a rar *e aph aBaxyauMM 
6onbHux Aeiew M3 Mock By C KaaaHCKoro eoxaana MaojunawM 
citopoH noMoiAM Aeten AOCTaeRT 



riapeHb pacnbmn /1 b kasahckom bape nepuoebiM 6 a/inoH 
npo TopoA Ka3BHb - Oct 20, 2015 

riapenb pacnwnun b kbmhckom 6a pe nepqosbiM San/iownwc 
noceTvrreneH sBaicyMpoBanM na ynnL|y flapeHb pacnbumn b 
KB3BHCKOM 6ape 


On Twitter, you receive far fewer results, as this 
form of the “evacuate” verb is rarely used in tweets 
and news articles. As you see in the results below, 
there is a 4-month gap between three tweets, 
indicating that there is either hardly any information 
about this topic, or the search phrase needs to be 
revised. 
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ZTinaLeonl iTinaGOLeon Jan 23 

B 2 Maca homm 3BaKynpoBaTb MawuHbi #rw6ma Myw "Ka3aHb crrano 
npuBbiMKOMl BeAb CKOBbKO 6a6na HaTeneT noKa nenoseK yaHaeT mo MaiuuHa 
Ha LUC croMT 



RT: 06 MCTopMM BOHHbi >Voina_41_45 Oct 28 

28 okt 41 r CoBeT no aaaicyaLiMM nocraHOBH/i aBaxynpoBaTb H3 JleHMHrpaaa b 
K aaaHb 1100 Hay^Hbix coTpyflHMKoe m Mnenoo hx ceMew 

4* tl 5 ★ 1 ••• 



Hoboctm Ka3aHM (S kazannews777 25 Sep 2014 

nepecTaHy mi 3BaKynpoBaTb MaujUHbi 3a Hapyuienne npaBun napxoBKM? 
#K«3aHb 

kazan-news net/other/20 1 4/09/ . 



2. 3BaKynpoBa/in b Ka 3 aHn (“evacuated in 
Kazan”) 

Using the past tense plural form of “evacuate” 
(common in passive constructions) yields far more 
useful results than the first search terms. (If you 
look back to the results from Google News, the 
second result uses these forms of the words 
evacuate and Kazan.) The tweets below are quite 
varied, but are all relevant for the search results, 
such as the evacuation of a church after a fire, a 
bus evacuation, and a school evacuation: 




Melamie Cepero raomartn Jul 19 

Arronpwjen noworan aaaKywpoBaTb naccawpoB b Ka34hm rtaccawupoe M3 
3aTonneHHoro aBTo6yca 3BaKyiipoBajiM npu noMoiip npwgena 


wm 3 MMnk. 71 neT 3 nnneeet!t Jul 7 

J B Ka3bhm BnacTM npo^atoT KHMHMiry naqMenToe roTopon anaKynpoaanM M3-3a 
b| 2 "cnon3aHM« crew" 



CoObiTMR - ntatru Jun 24 

BUflEO B KaaaHM naccawpoe *yTOHyeujero» asTooyca seaicyMpoBanii Ha 
aBTonpMuen« salat ru/videos/216 v k ftcajaHb ~co6bm*« TrrrapcTaH 


H TPK KaaaHb *zn_tv Jun 24 

26 aeaicyMpoBa/iM .-3 ae tcxoto c a^a b KaiaMM M3-34 aaMb^aHwn 

anarrponpOMAPM kb v»inn Arrcxoro c*A 9 N* 246 bit fy '1LB3KhG 


ripecca Tarapcfana stress* Jun 24 

B Ka3BHM naccawpoe «yTOHyeujero» aeiooyca 3eaKyMpoeanM hi 
aBionpHtiene iBUflEO) tatpressa nynews/21000 htrnl vk cc/3\Mf* 
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If you are not familiar with Russian, it is difficult to opaque acronyms, Twitter searches, and Google 

know what phrases and search parameters to use to assist your research efforts. 

to maximize results. So, it’s a good idea to enter 

general Russian terms and phrases into Google- 

such as “evacuation” and “Kazan”— and then copy 

the terms used most often. After we did this with 

the news results from Google, we found many 

more relevant results in our Twitter search, 

which— it's important to recall— is not very 

accommodating to the malleable nature of Russian 

nouns and verbs. 

*** 

As you can see from these guides, researching in 
Russian— without knowing Russian— can be 
frustrating and time-consuming, but it is ultimately 
possible. You do not have to know how to read 
Russian, or even know the Cyrillic alphabet, to 
conduct Russian-language open-source research, 
but it certainly helps to have a basic familiarity with 
the language. After a while, you will start to 
recognize the letters and figure out how to read the 
alphabet, especially as certain names and cities 
begin to reappear in your searches. In the 
meantime, this guide will help you leverage 
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Unearthing Local Stories on the 
Russian-Language Internet 



Digging for Buk missile systems. Original photo by 
Mark Robinson. May 1, 2014. CC 2.0. Edited by 
Kevin Rothrock. 


While a lot of open-source research on the RuNet 
is possible thanks to broad searches on Google, 
Vkontakte, Twitter, and other websites, sometimes 
it’s best to drill down to the narrowest sources 
available. This guide will instruct you on how to 
find local online communities on the Russian- 
language Internet. Oftentimes, eyewitness 
accounts, photographs, and videos that spread 


virally on the Internet originate in small, relatively 
unknown communities. 

Contents 

• Finding local communities on Vkontakte 

• Navigating local online communities on VKontakte 

• Finding other local groups 

How do small groups make big waves on the 
Internet and in the media? Consider an example 
from September 2015, when a local online 
community for the Russian city of 
Novocherkassk garnered international attention after 
someone shared a photograph of a child being 
walked like a dog. 
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Yahoo/ 

NEWS 


Search News I Search Web 


News Home 

US 

World 

Politics 

Tech 

Science 

Health 

Odd News 

Local 

Dear Abby 

Comics 

ABC News 

Katie Counc 

Trending 

Photos 


Recommended Games 



More games » 


Police Probe After Woman Is Pictured 
Taking Grandson On ‘Dog-Like’ Walk 
With Arm Leash 

September 9 20IS711AM 



As we read the story, we see that the post was 
made in the “Overheard in Novocherkassk” group 
on the Russian social network Vkontakte: 


Critics say the snap taken in Novocherkassk and uploaded to social media site VKontakte, 
makes it looks like the youngster is being treated like a pooch 


The image was published to the 


jOverheard in Novocherkassk 


page, it’s reported 


Content that resonates online widely 
sometimes originates on such websites, and we as 
researchers can verify photographs and videos by 


tracking down the original source, or by 
investigating other claims through these pages. 

Finding local communities on Vkontakte 

For nearly every Russian and Ukrainian city and 
region, there is a local group on Vkontakte for 
residents to swap stories and chat. The two most 
popular groups are called “noAC/iyiuaHO b ...” 
(“Overheard in...”) and “TnnnHHbiM ...” (“A Typical 
Day in...”). In the latter case, the word “typical” 
(TMnMHHbM) may change endings to “TMni/HHaa” or 
“TMnMHHoe", depending on the gender of the 
locality's name. A Google search, however, yields 
results for all spellings, regardless of the 
grammatical ending to the word in the community's 
name. Additionally, if these two methods do not 
produce useful results, you may try searching for 
the word “public” using the phrase: “nabnHK” + [city 
name]. 

Internet users primarily use these groups to chat 
with other locals or to find services available in 
town. Common queries you'll find in these 
communities are “Who can give me a ride to a 
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neighboring town?” and “Does anyone know a 
good place to get my cell phone fixed?” 

When news breaks in certain localities, however, 
these groups can transform into platforms for 
heated discussions. When war came to eastern 
Ukraine, some Vkontakte communities became 
digital spaces to talk about the conflict from local 
points of view. The topics in these groups include 
talk of troop movements, checking in on the safety 
of residents in certain apartment buildings, and 
sharing photographs and videos of the scenes 
from the conflict. 

As you would imagine, these local groups can offer 
unique access to open-source information in the 
form of eyewitnesses and local reports. However, 
there are challenges, as these groups’ 
administrators often have strong political 
allegiances, particularly in conflict scenarios. In 
eastern Ukraine, for instance, many of the 
Vkontakte groups’ administrators sympathize with 
the pro-Russian separatists, leading to either 
outright censorship or self-censorship from locals 
who post in these groups. 


You can find these local groups by searching the 
Internet for the words ‘TloflcnyLijaHO b” or 
“TunnHHbifi,” plus a city or region name. Providing 
the correct grammatical case of the word is not 
important, as websites like Google can bring 
relevant results for both “b floHeuK” (to Donetsk) 
and “b floHeuKe” (in Donetsk), even if one is used 
incorrectly. The search results for “noAC/iyujaHO b 
floHei_u<e” reveal numerous groups, including 
mirrors for these communities hosted on 
LiveJournal and Ask.fm (where user-submitted 
questions are posted), as well as the addresses of 
the Vkontakte groups. 
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Google 


noflcnyiuawo b aohgukg 



Web News Videos Images Maps More • Search tools 


About 60.800 results (0 23 seconds) 

noAcnyujaHO - [AoHeqK] | BKoHTaicre 

vk com/overheardn * Translate this page 

CaMM* BKycMWM vo$e m AecepT nnaapur KocPomhh '4 Friends Premium Coffee” 
Hameuy oOtueuy cnyua^HOMy nciAm»cy»«y *3 uucna CAenaeuaa penocT abhhom 


noAcnyujaHO b AoHeqice P.O. | BKomairre 

vk convpdsMlonecke » Translate this page 

Jan 18. 2014 Aoweuic Pocroecran obnacTb «noocnyuiaMo» - coLfia/ibHuri 
paaanef atenbHb« npoerrr a KOTopoai no ah AennTcn KawAUM Ae«b cbommh 


noAcnyujaHO b Aohblikb | BKoHTaKTe 

vk com/overhear_donetsk » T ranslate this page 

rtoocnyuiano B /lotteuke Kto to coaAan tokom icnaccHbM na&iMK npo flo«eqk a a ne 
AQAyuancx' - PunaT AxiaeToe O rounaHHH HacTano Bpeua paccraaatb 


noACJiyiuaHo b floHeqKe | BKoHTaKTe 

vUcom/podskishanovdonetske ▼ Translate this page 

noocnyuiaHO b floHeme 3Aecb Bee HCTopMM TBoero ropoAa! O MecTe floporwe 
Apy 3bn boo HoeocTHyo nemy mu 6yAeM (popunpoeaTb Mcwiiouicrenbwo M3 


PaaroBopbi. rioAcnyiuaHHbie b flOHeqKe 

overheardonetsk Itvejournal com/ ~ Translate this page 

Aeeyoaa NM HaeaKTe totab h oncpoio Zjeeyu*a N»2 He asm Mena npcuyer 

Heeymra Nil Hyn cmam bombm rorAa fae noAcnyuiaHo: B Mapwpyrve Nt72 


noAc/iyuiaHO b flOHeqKe | ask fhvpdslvdonecke 

ask Tm/pdslvdonecke * Translate this page 

Mon no^MMaa noApyxnta AHTOMwra tu y Mena caMan nymuaB OMe**. mobno tb 6 b) Y 
hoc OMOHb mhoto xopouatx h pwaviHba aocnowwiaMra* ))) tm caMaB 

noAcnyujaHO b flOHeijKe Poct.o 6 /i | ask.fm ... 

ask fm/podslushano_doneck * Translate this page 

tar 6 m Bb< oTHecnucb • tom> ecru* eauia 6b«uian Aeeywra Havana ecrope 

scTpeMiTbCB c eaajMM *• flpyroM? oco 6 onmo ocam Aonycnrrb. mto ara napow*a y*a 


Navigating local online communities on VKontakte 

When you visit some groups, often there 
are thousands of posts, making it very difficult to 
find content published several months earlier. 
Thankfully, there is a quick way to find posts that 


are archived. First, click the link that lists how 
many posts there are in the group (see the red box 
below). 


search games help invite music | 


My Profile edit 

My Friends 
My Photos 
My Videos 
My Music 
My Messages 
My Communities 
My News 
My Feedback 
My Settings 


Public page 

noflc/ryiuaHO - [floHeqk J 


a 

flogejiucb cBoeu ucmopueu 
unu ceKpemoM co bccm rvuiporvi! 
MCnonb 3 BM "nPEAAOmMTb HOBOCTb* 




10 F«b at 10:23 am 


lA* w a 


Go to comments ► 


3670 posts 


noAcnyuiano - [AoHeipc] 

# : EecnjUTNMM AonettK 

Today at 1:17 pm 

CepTVKjiMMT Ha cyHMy 200 rpn na ece e»uw ycnyr ot Ctvbmm 
*AM 3aHH-A3PO‘ noaapirr AspoaioaMH. r e/vetswe wapti. naujetiy 
o6uetry cny^aHHony noanHCMMcy kj nnoia coenaeunx penocr 

OSHHOH 3anntH 

Mms CMdcrnMO'iMKa yxaen 2 wan. khi Mower craTb Tonbico 
noomowK AspooKMHH. r e/weirne luapu. m 6ecnnan«HM floneiw 

A 



Follow 


5, 727 followers 


Foiowers 

5,727 followers 

ar 

Valentina Natalya 

r 

m 

Anton Natasha Ckatenna 




Scroll through a few pages of the group (see the 
new red box below), and notice the number next to 
“offset=” in the URL (highlighted in blue below). 
This number indicates the posts being displayed, 
with “1” being the most recent. There are 3,670 
posts in the group displayed below, as indicated in 
the screenshot above, so we can determine the 
the chronology of posts based on that number. If 
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you replace the number (120 below) with a larger 
number, you will be able to quickly navigate 
through old posts. It could take a while, but after 
entering a few numbers, you can find the correct 
period of time. For example, if you replace the 
number 120 above with 1680, then posts from July 
17 and 18, 2014, will appear. 


C D vk.com/wall-343341 18?offset=E]&own=1 


l noAuiyuHMO [Adhcmk] 


ieardi games help invite 


My Profile 
My Friends 
My Photos 
My Videos 
My Music 
My Messages 
My Communities 
My News 
My Feedback 
My Settings 


Posts by community 




no 0 < siyiua no - [/V>Meipi] 

B e* 3 to flpHeuK, Aenca! [ T HnMSHMM floneuK] 

Mar 20, 2015 at 1:01 pm 

Pa6oTa MaxoanT Bac cam 1 


49% ocex pa6oT0A8Tene« muivt coTpyAiovcoe 
e 6aae pe3ioHe erne ao pa3Meiuet*tfl eaganon* 


Search posts 


« 5 6 7 8 9 » 


OmpaoniiKTe coon peawne no ccwme: http://vk.ee/3r2afn 
m Bbi e KpaT^aimiMe epow CMoxeTe naimi ce6e pa6oTy* 

Pa6oTooaTenM motyt coaaaearb ea*ahcnn no c curve: http://vk.cc/3r2bZ8 


When Bellingcat [note to readers: the author of this 
guidebook is a contributor to Bellingcat] conducted 
research into the anti-aircraft system that shot 
down Malaysia Airlines Flight 17, the 
“rioflCJiyLuaHO b Tope3e” (Overheard in Torez) 
group provided essential information. Eyewitness 
reports of a military convoy moving through the 
cities of Torez and Snizhne were posted in this 


group on July 17, shortly before MH17 was shot 
down. 


4 Viktoria Smalina 

Jul 17, 2014 at 4:25 am | Report spam | Share | Like w 151 


161 comments 


« 6 7 8 9 



Anna Reshtanenko 
3 TaMica wa CHexnoe npoexann 

17 Jul 2014 | Report spam | Reply | Like 


3 tanks passed through Snizhne 



Maxim Patsyuk 
KMHbTe bKaeo 

17 Jul 2014 | Report spam | Reply | Uke 


Upload the video 



Maxim patsyuk Tanks of the DNR (Donetsk People's 

T,M,a,flHP? Republic)? 

17 Jul 2014 | Report spam | Reply | Uke 



Maxim Patsyuk 

https://vk.com/1dubnyak_nevy Mysbuca hopm ) 
17 Jul 2014 | Report spam | Reply | Uke 


The music is alright ;) 



Anna Reshtanenko replied to Maxim Patsyuk 
MaiccMM, y mkx e»e 6wno <fenaroe 

17 Jul 2014 | Report spam | Reply | Uke 


Maksim, they didn't have 
any flags 



Maxim Patsyuk replied to Anna Reshtanenko 
Anna, 3to xpenoeo (( 

17 Jul 2014 | Report spam | Reply | Uke 


Anna, this is messed 
up :( 


The screenshot above captures 
correspondence between two Vkontakte accounts 
that apprently belong to residents of Snizhne and 
Torez. They discuss how three tanks without flags 
passed through Snizhne at 1 :14 p.m. (local time)— 
almost exactly three hours before MH17 was shot 
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down near Snizhne. According to Ukrainian 
security services, a convoy of hree tanks and two 
BTRs escorted the Buk system through Snizhne 
on July 17. Thus, we can use local communities to 
find eye witnesses who can verify— or refute— the 
official accounts of government officials. 

Finding other local groups 

Vkontakte is not the only online forum for local 
communities; there are several popular social 
networks and message boards for neighbors to 
meet and talk. 

Many Russian Internet users turn to Odnoklassniki 
to organize discussion groups almost as often as 
thye use Vkontakte. With a simple Google search, 
you can find nearly every one of these groups 
without much trouble. Here is a search string that 
will identify numerous local groups on 
Odnoklassniki dedicated to the Russian city of 
Novosibirsk: 


Google site ok ru Hobocmohpck 


4 E 


Web Maps News Images Videos More ▼ Search tools 


About 331.000 results (0 63 seconds) 

TunnHHbiM hobocm6mpck - O flHOKnaccHMKM Typical Novosibirsk 

ok ru/typ»calnsk * Translate this page 

Nov 7. 2014 Haw /uoOmmuh ropoA Hobocmohpck 1 no Bcew eonpocaM ntmarre Ha 
nOMTy - yu!40956@mail ru 


Hoboctm HoBocn6npcKa - OflHOKnaccHMKH NeWS Of Novosibirsk 

ok ru/group/54235 100676096 * Translate this page 

Hoboctm HobocmOmpcks B «T anepeto Hobocn6mpck» npueeann airyny ha 4-m 

3Ta*e Toproeoro getrrpa «ranepea Hobocn6npck» ycTaHOBWiH aKBapwyM 

BOilblllOld Topofl HOBOCM6npCK - OAHOKJiaCCHHKM Big City Novosibirsk 

ok ru/bolshoygorodnovosibirsk ▼ T ranslate this page 

Aug 1. 2014 Boioan *Hobocm6mpck K)*hwm» np»i3Hinn KynbtypHbiM HacneAMeM 
Bnacm HoBocMbMpcKOM obnacTM n pn3 h an m o6terroM rynbTypHoro 


HOBOCM6npCK. >KMBOTHbie B fl 06 pbie pyKM. - OAHOKJiaCCHHKM 
ok ru/group5 1889788223648 ▼ Translate this page 

Hobocn6mpck )KnBOTHb*e b Aobpue py km Kot fliua MU4eT 3a6omMBux xo3nee! fliua 
ewe eecbMa mohoaom kot. MCKniouMTeneM no eceu KoiuaMbMM napaMetpaM 


Novosibirsk. Animals 
in good hands. 


In some communities, public message boards and 
forums are still popular, though they are not nearly 
as widely used as groups on Vkontakte and 
Odnoklassniki. To find these less common 
communities, search the city name along with 
keywords that include the word “cf)opyM” (forum). 

In the search below, two unique message boards 
and two Vkontakte groups reveal the so-called 
“Kharkov Forum” (XapbKOB cjDopyivi). The first 
result, Kharkov Forum, has hosted millions of 
messages over the past several years, 
addressing topics including politics, sports, and 
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help for soldiers and wounded civilians in the war, 
and included local chatter about road conditions. 


Google 


xapbKOB cfropyM 


Web Maps News Videos Apps More ▼ Search tools 


About 2,530,000 results (0.63 seconds) 

xapbKOB oopyM Kharkov Forum 

www.kharkovforum.com/ ▼ Translate this page 

06meropoflCKOM <J>opyM 06ii|eHne Ha pa3Hoo6pa3Hbie TeMbi. 

Results from kharkovforum com 


TnaBHblM 

rnaBHbin X<D yMHpaeT. ero 
flo>KeBbJBaioT coqceTM... (327 ... 

Hoboctm 

ripaBMna pa3flena "Hoboctm" (0 
OTBeTOB) nocneflHee ... 

XapbKOB Banna 

GPS HaBMraTopu (XapbKOB BanKa) 
Mo6nnbHbiM MHTepHeT l/lrpbi ... 


nOJlMTMKa 

no/IMTMKa. 3a npM3bJBbl K 
cenapaTM3My m 3KCTpeMM3M ... 

Bee O HeflBMWMMOCTM 

BHMMaHMe! 3to pa3flen o "pbiHKe 
HeflBMJKMMOCTM", a He o: "MeM ... 

>KMBOTHbie 

"KapTa" TeM pas^ena ")KMBOTHbie" (3 
OTBeTOB) nocneflHee ... 


XapbKOBCKMH cpopyM 
kharkovforums.com/ ▼ Translate this page 
Heo4)Mi^ianbHbiM 4>opyM ropofla XapbKOBa Unofficial forum of the city of Kharkiv 


Kharkovsky forum 


nojiMTMKa - XapbKOBCKMH cpopyM 
kharkovforums.com/forumdisplay. php?f=24 ▼ Translate this page 
Bee noriMTMHecKMe TeMbi HaxoflBTCB b stom m TonbKO b stom pa3flene 


Politics board of 
Kharkovsky forum 


XapbKOBCKMM OopyM / 9\ XAPbKOB | BKoHTaKTe 
vk.com/kharkovskiyforum ▼ T ranslate this page 
2 days ago - XapbKOBCKMM OopyM / R V XAPbKOB. #XapbKOBCKMM<J>opyM #XapbKOB 
#XapKiB #Hoboctm #Hobmhm #YKpaMHa #yKpaiHa #CMM #3MI. C yneTOM 


I heart Kharkov 
(VK) 


XapbKOB ct>opyM | BKoHTaKTe 
vk.com/kharkov_forum ▼ Translate this page 

XapbKOBCKMM $opyM Tenepb BKOHTaicre, >KfleM Bac no aflpecy kharkovforum.com 
Kynmo/npoflaM kharkovforum.com CflaM/CHMMy kharkovforum.com OopyM 


Kharkov Forum 
(VK) 


Additionally, in local communities, outside of the 
large public groups, there are often improvised 
communities set up during emergencies, designed 
to coordinate relief efforts. For example, during the 
devastating wildfires that swept across Siberia in 
April 2015, the “ Volunteer Wildfire Firefighters of 


Zabaikalve ” public Vkontakte group organized 
response efforts and distributed useful information 
to locals about avoiding the approaching forest 
fires. Additionally, locals wrote in this group to 
disseminate information and to organize volunteer 
and humanitarian efforts. 



Do you accept women as volunteers? 


IS Apr at 12:58 am ♦ 


Vladislav Zabiotsky 

m 

IS Apr at 1:00 am Reply 

Anatfaea ivMMnucti 
Pe 6 eTa, Mory war noexmv to/wt 

IS Apr at 1:09 am Reply 

Ole? Ivanov 

Tone mo «a Hew y**arb, eow rro 

15 Apr at 1:18 am Reply 




Yes 

Guys, I can come out, just pick me up 

I also don't have a way to get out there, 
someone pick me up if you can 



Vtedmlav Zabiotsky 
B oapyce cnoneww eerb evanr 

IS Apr at 12:SS am a | Comm. 


There are some pockets near Smolenka 

like* 


Alriry Dotqov 
C 6arwona aveary eb<o»orop*« 
[ yrpa nerwovo ptmMflo a 

IS Apr at 12:53 am Q 



Viktoria larchetiko 

Aaa npoMo aoofiuie *e cna6o 

IS Apr at l?:S8 am Reply 


Yaaa not weak at all 


From the balcny I see a 
wildfire burning in the 
highlands. Apparently fire 
brigades haven't been sent 
out there, in the morning it 
was smoking just a bit but 
now it's not weak at all! 


■ AnaUaua Ivashkevich 

TOVMO HI* CMtiuiMT*, -TO CHOOi patrope/wcs awconoropb* N M I 
«ro? Ta« Jaowrre, 6epwre < t«6o* 

15 Apr at 12:44 am O I Comment 


. Moa«mo«MT it was just reported that it's 
lM9t burning again in the 
highlands and by 
Smolenka, we need 
people. Can you send 
anyone? Call me, and take 
me with you! 
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Researching the RuNet by broadly searching 
Google, Twitter, and Vkontakte searches can only 
get you so far. To get through to a more specific, 
localized stratum of information, you must be able 
to locate and navigate the groups described 
above. While much of the open-source research 
concerning Russia and Ukraine over the past 18 
months has focused on the Ukrainian conflict, 
there are still seemingly endless pools of 
information on local networks for nearly any other 
topic of research, from wildfires to local oddities. 
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Herein Lie the Secrets of 


Geolocation 



With most photographs and videos, the most 
reliable way to conduct verification is through 
satellite images, allowing you to geolocate content 
by matching it to a known location. Sometimes, 
this requires observing changes in an area over 
time. Satellites have photographed almost every 
inch of the Earth, but there are special 
considerations when working in Russia and 
Ukraine concerning the availability of satellites and 
street-level imagery. This guide will provide 
instruction on using satellite images, with a focus 
on historical imagery, and available street-level 


imagery accessible for Russian and Ukrainian 
cities. 

Contents 

• Google 

• Yandex 

• Wikimapia 
Google 

Likely the most useful single piece of software 
when conducting open-source geolocation 
research is Google Earth Pro, which can be 
downloaded for free here . Google purchases its 
satellite imagery from Digital Globe, a private 
company with numerous satellites in orbit. 

Google Earth— which is a downloadable 
program— is not the same as Google Maps— which 
is what you access through your mobile apps or on 
a Web browser at http://maps.aooale.conn . While 
Google Earth contains many of the same features 
as the more familiar Google Maps, Google Earth 
also provides easily accessible historical imagery, 
3D terrain mapping, customizable locations, and 
markers that can be quickly imported and 
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exported, as well as many other features. In short, 
Google Earth is geared towards the power user, 
while Google Maps is for more casual use. 

Countless open-source reports use historical 
imagery comparisons in their analysis, but one 
recent example of this process can be found in 
a March 2015 Bellinqcat report (note: this 
text's author, Aric Toler, also wrote the 
Bellingcat report) that analyzed a large Russian 
training camp near the Ukrainian border. Viewing 
the location of this training camp, just south of the 
village of Chkalova in the Rostov oblast, reveals an 
extremely large, well-travelled training camp. 


Screenshot of a Google Earth image from October 
9, 2014. 


A question immediately comes to mind: is this 
training camp new, or has it been around for years, 
without any correlation to the Ukrainian crisis? 
Scrolling through the historical imagery on Google 
Earth will quickly reveal this answer. 
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File Edit [ View | Tools Add Help 
▼ Search V Toolbar 
Search Go< V Sidebar 


Russia, Rost 

ex: 37.4072 2 


Full Screen 
View Size 



Show Navigation 

Status Bar 
Grid 

Overview Map 
Scale Legend 
Tour Guide 

Atmosphere 

Sun 

Historical Imagery 
Water Surface 

Explore 

Reset 


Make this my start location 


Ctrl+Alt+T 
Ctrl* Alt* B 

Fll 

► 

► 

Ctrl* L 
Ctrl+ M 


► 

► 


After choosing the “Historical Imagery” option 
under View, a slider will appear in the top-left 


corner of your satellite imagery. After rolling back 
the imagery to a previous date, we see that this 
training ground was pristine farmland in October 
2013— revealing that the camp sprung up anew 
after the Ukrainian crisis began. 



Yandex 


The Russian search engine Yandex operates 
a mapping service similar to Google Maps, including 
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road maps, satellite imagery, and selective 
coverage of street-level imagery. 

There are two ways to access Yandex maps— 
through maps.yandex.ru and through 
maps.yandex.com. As you'd expect, the latter is in 
English, and the former in Russian. They are 
largely the same, but the layouts are slightly 
different. 



Top: English Yandex, Bottom: Russian Yandex. 


The top version is the English site, and the bottom 
is Russian. For the remainder of this tutorial, the 
Russian version (bottom) will be used, but the 
English version is roughly equivalent and the 
instructions should mostly translate over. 

Instead of “street view,” Yandex uses what it calls 
the “Panorama” view for street-level imagery of 
certain cities in Russia, Ukraine, Belarus, 
Kazakhstan (Astana, Almaty, and Karaganda), and 
Turkey. As evident in the map below, only fairly 
large cities and roadways have Panorama imagery 
available, indicated by the shaded blue areas. You 
can turn on Panorama imagery by clicking the 
Panorama (llaHopaMbi) button in the top-right of 
the page. 
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A very nifty feature that is not available on Google 
is livestream videos from locations (most often 
traffic cameras). After selecting the video-camera 
option in the top-right corner (BnAeoKaMepbi), you 
can select the purple camera icons on the map 
(most often in densely populated urban areas) for 
a livestream of the location. See below with a 
traffic camera in central Moscow: 



Like Google Maps, Yandex can place geolocated 
photos from users onto their maps, giving you 
additional views of a location from the ground. 



In the above screenshot, the title of the photograph 
(which is “Untitled,” 6e3 Ha 3 BaHnn) is available, 
along with the user responsible for uploading the 
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image (bottom-left red box), and the date of the 
photograph’s upload (bottom-right red box). Turn 
on the photographs overlaid on the map by 
selecting Photographs (cf 30 Torpac]DHM) in the top- 
right corner. 

The Yandex satellite imagery, which is unique from 
the Google Maps (DigitalGlobe) satellite imagery, 
can also be accessed through Wikimapia . 

Wikimapia 

Wikimapia combines an array of satellite services 
with user-inputted descriptions of locations, 
providing an impressive array of professional 
(satellite) and local (descriptions) information. 



The available satellite imagery can be viewed in 
the top-right corner, including Google 
(DigitalGlobe) imagery, Google Terrain, Bing, 
Yandex, Here, OSM (Open Street Map), and 
Yahoo. 
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This tweet was posted a few hours before the MH17 
disaster, showing a Buk anti-aircraft system 
supposedly in the town of Snezhnoe. By using 
Wikimapia, we can locate some of the landmarks 
mentioned in the tweet and verify the location of 
the image. 


IgorGirkin 


O A Follow 


#CHe>KHoe O pyccKMX 3eHMTMMKax m "Bytce" 
B CHe>KHOM "3T0 flOM 50 JieT OKTfl6pfl, B 
HeM nupka, Heflanexo yroneK m cfeypiueT" 



The five locations mentioned in the tweet above 
are reproduced below with English translations: 


1 . b CHe>KHOM: in Snezhnoe 

2. flOM 50 JieT OKTnbpn: house/building 50 
Years of October 

3. b HeM nupKa: in it is pirka 

4. yroneK: ugolek (small piece of coal) 

5. cpypweT: furshet (buffet, smorgasbord) 

We can assume that the person posting this is not 
saying that the Buk is near a buffet of food or a 
little piece of coal, so we need to do some more 
digging to find the context of the words. The 
search function within Wikimapia is not very useful, 
so it is often better to search the site using Google, 
but restricting our results to those on Wikimapia by 
using the “site: search” function. 



Web Maps News Videos Images More * Search tools 


About 32 results (0 61 seconds) 

nn. 50 neT OKTH6pa. 1 - CHe>KHoe - Wikimapia 

wikimapia org/27039223/ru/nn-50-/ieT-OKTn6pn-l ~ Translate this page 
nn 50 neT OKTn6pn. 1 — 3 to MHoroKBapmpHbiH #cnnoM aom, mto naxoAHTcn Ha ymu^e 
nn 50 neT OKtn6pn e ropoAe CnewHoe nn 50 neT Ornibpfl. 1 Chokhoc 


By following the first result, we find that “50 Years 
of October” is a street in the center of Snezhnoe. 
From Wikimapia, we can search the nearby 
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location and look for the other landmarks 
mentioned in the tweet: Ugolek, Firshet, 
and Pirka. 



Two of these are immediately clear on both sides 
of 50 Years of October (the street that runs vertical 
between the two landmarks). After clicking their 
entries on Wikimapia, we find that Furshet is a 
supermarket and Ugolek is a restaurant. 



We do not know where Pirka is (though if you 
looked long and hard enough, you would see it is a 
shop in one of the apartment buildings in the area), 
but identifying four of the five landmarks— the city, 
street, and two locations— is enough to focus our 
search on this area for traces of the Buk in the 
photograph. From here, it's a matter of geolocation 
and matching angles, trees, and the road in the 
photograph. 

For those wondering: the Buk was indeed in 
Snezhnoe, photographed approximately 3-4 hours 
before MH17 was shot down. The photograph was 
traced back a building on 50 Years of October, 
facing towards the apartment building on 
Karapetyana 13a. 
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Whatever a photograph's location, there are 
always geolocation options— whether it's a 
livestream from the street, or a blurry satellite 
photo from 2012. Using the resources described in 
this guide, you should be able to find the most 
accurate and helpful image available for locations 
in Russia and Ukraine, whether it's from Google, 
Yandex, Wikimapia, or sites less useful for Russia 
and Ukraine, such as TerraServer or Bing Maps . 
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Triangulating Sources to Thin the 
Fog of War 



The war in eastern Ukraine was the first European 
war to take place in the ubiquitous presence of the 
Internet, documenting nearly every aspect of the 
war as it played out. The conflict's ideological 
battleground unfolded online, making tragic events 
into fodder for propaganda (for Internet users in 
both camps of the war). 

As historians and investigators look back at the 
fighting, it will be vital to collect as many views as 


possible on individual events, in order to discern 
fact from fiction. This guide will show you how to 
find pro-separatist, pro-Ukrainian, and 
independent-observer (OSCE) reports for specific 
days, using as a case study the January 13, 2015, 
shelling attack on a civilian bus near the town of 
Volnovakha, which resulted in the deaths of 12 
passengers. 

Contents 

• Separatist dispatches 

• Ukrainian National Security and Defense Council 

• The Organization for Security and Co-operation in 
Europe (OSCE) 

• Thinning the ‘fog of war’ 

Separatist dispatches 

Much like the Ukrainian government, various 
separatist groups issue dispatches that summarize 
recent battles and military activity. Also like 
dispatches from Kyiv, these should not be trusted 
without extensive verification through outside 
sources. Below is a list of some of the most 
popular separatist dispatches, most of which have 
information going back to the first half of 2014. 
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Many of these dispatches duplicate the same 
information, but they may also contain additional 
photos, videos, and context: 

• Cboakm ot onojiHeHMfl Hobopccmm (Dispatches 
from the militia of Novorossiya) 

Vkontakte group. This post was previously 
called Cboaki/i ot CTpe/iKOBa l/lropn 
l/lBaHOBuna (Dispatches from Igor Ivanovich 
Strelkov), containing dispatches supposedly 
from the infamous separatist commander 
himself, though the texts were actually 
authored by others. Some of the posts were 
taken from messages that Strelkov (Igor 
Girkin) supposedly posted through other 
channels. 

• Hobocth Hobopoccmm (News of Novorossiya) 

• PvccKas BecHa (Russian Spring) 

• Hobocth HoHeuKOM Pecnvb/iMKM (News of the 
Donetsk Republic) 

• HOBOPOCCMfl l/lHCbOPMaLiMOHHOe 

AreHTCTBo (Novorossiya Information Agency) 

• BoeHHbie cboukm c KDro-BocTQHHoro 
cbpoHTa (War dispatches from the 
Southeastern front) 


• floHbacc Hemp (Donbass Center), 

with dispatches from a variety of sources, 
including journalists, specific officials, and 
individual militants. 


Searching for one of these outlets (Hobocth 
Hobopoccmm) with the date parameters of the day 
of and after the attack, we find dispatches on pro- 
separatist RusVesna.su for the two days: 


Soogle 


Hobocth Hoeopoccmi 



All News Videos Maps Apps More ▼ Search tools 


Jan 13, 2015 - Jan 14, 2015 ▼ Sorted by relevance ▼ All results ▼ Gear 

CBOflKa HOBOCTeM Hobopoccmm 14 flHBapa 2015 r. (BM/jeo ... 
rusvesna su/ntws/ 142 1290601 ▼ Translate this page 

Jan 15, 2015 - B ima6e flHP sanemni o rn6e/ni rath MHpnbtx acme/ieti b floHeqKe 3a 
cyTKM;. — Ha (fcpomax Hobopoccmm npoAoroKamicb aKTHBHbie 6oeBbje acmctbhb. 


CBOflKa HOBOCTeM Hobopoccmm 13 flHBapa 2015 r. (BM^eo ... 
rusvesna su/news/ 142 11 81 637 ▼ Translate this page 
Jan 13. 2015 - CeroAH* c yTpa apMiia Hobopoccmm eeAeT KOHTp6aTape*HbiM oronb 
n03ML)HM OKKynaHTOB B fleCKaX H TOHeHbKOM 


For the January 13 report , the separatist dispatch 
says, “The armed forces of Ukraine shot up a 
passenger bus with peaceful citizens at a 
checkpoint near Volnovakha. 10 people are dead, 
13 are wounded.” More information can be found 
searching for another of these dispatches— the 


48 



News of the Donetsk Republic— with the data 
parameters and the keyword “Volnovakha” in 
Russian: 


Google 


"hoboctm AOHeijKOM pecny6jiMKM" BonHoeaxa 


All News Maps Videos Images More ▼ Search tools 


Jan 13, 2015 - Jan 14, 2015 ▼ Sorted by relevance ▼ All results ▼ Clear 


HoBbie Bepcnn TpareflMM nofl BonHOBaxoti. » flHP ... 
dnr-news com » CraTbM ▼ T ranslate this page 

Jan 14. 2015 - Hoebie Bepaw Tpare^mi noA BonHosaxoM Bepaw CTpenroBa "Be3 
BapwaHToe UspetueTM/iM M3 CTperiKoeoro opy*na h cpomho nonbrranucb BbtflaTb 3a 

yxpanHa npeAdaBM/ia BMfleo pa3pbiBa rpaflOB Ha ... 
dnr-news com > Bnaeo ▼ Translate this page 

Jan 14. 2015 - WpaMHa npeACTaBMna BMAeo pa3pbiea V pa^oe Ha Bnorcnocry noA 
BonHOBaxoii VKpaHHa npeACTaBMna BMAeo paapbJBa TpaAOB Ha 6noKnocTy noA 
BonHoeaxoM 


In the first result , the news site provides quotations 
from separatist commander Igor Girkin (Strelkov) 
and pro-Russian/pro-separatist blogger Boris 
Rozhin (“colonelcassad”). Girkin accused Ukraine 
of “attempting to hide the truth” and said that there 
were “clear signs of bullet wounds from small 
caliber weapons,” contradicting Ukrainian claims 
that separatists shelled the checkpoint with 
artillery. Rozhin sees a more complicated plot, 
saying that there should be “several craters” at the 
site and not just one near the bus, and that 
Ukraine fired a single shell at the passenger bus to 
blame separatists for the attack. In a real 


separatist attack with a Grad artillery system, as 
Rozhin's argument goes, there would be dozens of 
shells fired at the location. 

Ukrainian National Security and Defense Council 

The Ukrainian National Security and Defense 
Council (CHBO, or NSDC) releases regular 
dispatches regarding casualty figures, the 
locations of battles, and sightings of Russian and 
separatist military equipment in eastern Ukraine. 
You can access these from various Ukrainian 
news sites, including the video dispatches that 
usually include Anti-Terrorist Operation (ATO) 
spokesperson Andrey Lysenko. Like the separatist 
dispatches, the information contained in these 
NSDC and ATO dispatches should not be taken at 
face value and should always be verified with 
additional sources. 

To find a situation map or dispatch for a particular 
day, Google the phrase “ATO CHBO,” plus the 
date, or change the Google search parameters to 
include only a certain day. The Ukrainian news 
site Il2.ua hosts videos and reports on nearly all of 
these dispatches. You can also find information 
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from ATO dispatches and National Security and 
Defense Council reports on social media, such as 
NSDC's English-language Twitter account . 


Google atochbo 

All News Images Videos Maps More* Search tools 


Jan 13, 2015 - Jan 14, 2015 ▼ Sorted by relevance * All results ▼ Clear 

Cmyaunfl b 30 He ATO Ha 13 BHBapfl. Kapia CHBO | PI/IA ... 
rian.com ua/infografika/20 150 11 3/36 1980656 html * Translate this page 
Jan 13. 2015 - Cmyaipn b 30«e ATO ocTaeTcn no-npe*Hewy c/io*hom nepewnpun 
b Aon6acce lloApo6Hee o paccTaHOBKe cnn Ha BocTOKe cMOTptrre b irapTe CHBO 

B CHBO Ha3Bann flaTy BBefleHMfl nponycKHoro pewwvia b ... 
ru.tsn ua/ /v-snbo-nazvall-datu-vvedeniya-propuskn * Translate this page 
Jan 14, 2015 - B 30«y ATO mo*ho 6yflei nonacib TonbKO no nponycxy HnntocTpaiftn 
BBe/tenne nponycKHoro pe*HMa Me*ay noflKOHTponbHbiMM WpaMHe TeppwTopMflMH m 


KapTa ATO m othct CHBO Ha 14 HHBapa 2015 - Giga Hoboctm 

giga ua/KapTa-aTO-H-OTMeT-CH6o Ha l4-»HBapn-2015/ * Translate this page 
Jan 14. 2015 - CHTyagnH b 30He ATO ocTaeicn HanpafewHOM Ho Ha6n(OAaeica 
OTHOCMTe/ibHoe yMeHbmeHHe KonwecTBa o6cTpenoe llornO qahh BoeHHOcny*ainMM. 
17 


The first three results are Ukrainian news reports 
on the updated maps and situation reports from 
the Ukrainian NSDC for January 13 and 14, 
2015— the day of and after the Volnovakha bus 
attack. 



CHTyALJIfl HA CX 0 AI yKPAIHH 
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Ha 13 ciMHfl 12:00 
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On the map, the red square denotes Volnovakha, 
where the bus attack occurred. As we can see, the 
area is well under Ukrainian control. 

Further investigation with searches of BonHOBaxa 
aBTobyc (Volnovakha bus), using the date 
parameters of January 13-14, 2015, gives us a 
tremendous amount of information, as this incident 
made news headlines for several days in Ukraine 
and Russia. Shortly after the attack, various 
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Ukrainian news outlets published a video of the 
attack from security footage, showing 
approximately 88 shells fall around the checkpoint, 
with fire seemingly coming from the northeast in 
the direction of separatist-held Dokuchaievsk. 

The Organization for Security and Co-operation in 
Europe (OSCE) 

The OSCE is the only international organization 
allowed to conduct monitoring in eastern Ukraine, 
thus making it a valuable resource for 
independent information about the conflict. The 
OSCE produces daily updates, along with spot 
reports on special events, regarding any fighting 
observed, groups of vehicles spotted, 
investigations into particular attacks, and other 
events. The daily OSCE updates can be 
accessed here , along with the spot reports. 

One of the most widely discussed OSCE updates 

was its spot report on the Volnovakha bus attack , 
following a separatist artillery attack near a checkpoint . 

With allegations flying from both Ukraine and 
separatist forces, the OSCE report was a 
stabilizing force in the controversy, dismissing 


separatist allegations of a landmine triggering the 
attack or a Ukrainian “false flag” attack against its 
own checkpoint. 

The OSCE's Special Monitoring Mission 
(SMM) arrived at the location of the incident at 
5:45 p.m. and witnessed the removal of two dead 
passengers from the bus. The bus had shrapnel 
damage consistent with a nearby rocket impact, 
estimated by the SMM to be 12-15 meters from the 
side of the bus. The SMM visited the Volnovakha 
hospital where the staff confirmed that 10 persons 
on the bus were killed instantly, while two died 
later in the hospital. Another 17 passengers were 
injured. 

The OSCE later confirmed that a Grad rocket, fired 
from the northeast of Volnovakha, was the source 
of the attack on the bus. This information 
corroborates Ukrainian accusations that 
separatists fired an artillery attack from territory to 
the northeast of Volnovakha, as seen in the 
security footage from the checkpoint. 
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Thinning the ‘fog of war’ 


There is more information about the Volnovakha 
bus attack than most incidents in the Ukrainian 
war, as this particular attack drew international 
outrage and commentary from world leaders. 
Nevertheless, the same research principles can be 
applied to study events as minor as an empty town 
being hit by mortar fire, or as major as the MH17 
tragedy. Though the Volnovakha attack was fairly 
unambiguous in culpability, not all incidents are so 
clear, as Ukrainian sources often compete with 
separatist spokespersons to produce unreliable 
reports. Even with the flood of wartime information 
created and made accessible by the Internet 
(dispatches, videos, photographs, and eyewitness 
accounts), the fog of war is still thick. But it's not 
impenetrable. 
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How to Comb Russia's TV News 



Combing Russia's television news networks. 
Image: Kevin Rothrock. 


According to survey research by the Levada Center, 
the vast majority of Russians (85 percent) say they 
watch television to learn about the country's news. 
While less than half (41 percent) say they also 
trust the news they learn from TV, it still inspires 
twice at least as much confidence than any of its 
competitors. When conducting online open-source 
research in Russian, finding and evaluating 
television reports is often just as important as 
combing social media and online news sources. 
This guide explains how to evaluate TV news 
sources and navigate television networks’ online 


video archives, in order to compare coverage of 
specific events. 

Contents 

• Channel One (flepBbiM KaHa/i) 

• Russia 1 (Pocchr 1) 

• Russia 24 (Pocchr 24 } 

• NTV (HTB) 

• Zvezda (TeneKaHa/i 3Be3aa) 

• LifeNews (JlaMchHbtoc) 

• TV Rain (flo>t<xib) 

Channel One (flepBbin KaHan) 

This is the most-watched channel in Russia, airing 
a variety of news, entertainment, and sports 
programs. The channel is state-owned and has a 
generally pro-government bias. For open-source 
research, the most relevant programming is the 
popular “Vremya” (BpeMn) nightly news program, 
which has a weekly segment by the infamous 
pundit Dmitry Kiselyov. A livestream of the channel 
can be viewed here. 


The fastest way to locate particular pieces of 
Channel One's news coverage is by searching 


53 


through its easy-to-use video archive , sorted by date 
(if you cannot read the months, check a reference 
guide here from MasterRussian.com). The archive 
goes back to 1999, providing a wealth of easily 
accessible information. 
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Additionally, you can search through Channel 
One’s YouTube channel here . 

Russia 1 (Poccms 1) 

This is the second-most-watched channel in 
Russia, airing news, entertainment, sports, 
documentaries, and other programming. Like 
Channel One, the channel is state-owned and the 
news coverage is rarely, if ever, critical of the 
Kremlin. Each news segment's title contains the 
word “Vesti” (BecTu), including “Vesti,” “Vesti on 


Saturday” (BecTM b cybboTy), “Vesti at 8:00 p.m.” 
(BecTM b 20:00), and so on. A livestream of the 
channel can be viewed here. 


The website makes it very easy to search for news 
segments, categorizing them by date and by specific 

program . After clicking on a Vesti segment, you can 
search by a calendar (Ka/ieHflapb) to find a news 
broadcast on a specific date, going back to 2012. 
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Additionally, Russia 1 has numerous regional 
channels. For their video broadcasts, search for 
Poccmh 1 with the region or city name— for 
example, enter “Poccun 1 Hpoc/iaB/ib” to find the 
station's Yaroslavl branch. Googling this phrase 
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will bring the official television station’s website and 
the YouTube channel for the station , giving us an 
archive of nearly all of their local news broadcasts. 

Russia 24 (Poccmr 24) 

This is a 24-hour news channel and the sister 
channel to Russia 1 . The channel was named 
“Vesti” (BecTu) until 2010, and still retains the 
same URL of Vesti.ru. A livestream of the channel 
can be viewed here. 


As with Russia 1 , there are vast video archives for 
the news broadcasts for this channel, accessible 
by category and show here . You can filter the 
results by date after searching a term (click the 
magnifying glass in top-right corner), then selecting 
a date range. 
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Additionally, Russia 24’s vast news broadcast 
archives are accessible (going back a few years) 
on its YouTube channel . The programs are filtered 
on the YouTube channel by theme (such as the 
more-than-1 ,000 videos on the “Situation in 
Ukraine” channel) or by program. 
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NTV(HTB) 


yBMMCTBO «LljyMHOrO» 
npoMoyTepa b Mocxse 

flpoTecTbi b MonflaBnn ► 


29 ▼ 


01 * 


2016 ▼ 


Bee HOBOCTM H BMfleO 


>K M 3 H b 


CBeitcee BMfleo YnbflHOBCKHM 
KO/uieKTop-nofljKwraTejib OTpMMaeT, mo 
b bio m B an flonrw • 5 mmhyt Hasaa 

Since its takeover in March 2000 (following Putin's 
first presidential election win), NTV has been under 


the control of Media-Most and, after 2001 , 
Gazprom Media. NTV is nominally independent, 
but the state has a majority stake in Gazprom, 
effectively putting the Kremlin in control of the 
network's major editorial policies. 

NTV airs a number of news programs, along with 
shows, movies, and emotional investigations that 
often focus on crime. Its news is slanted towards 
the government line, and it's often more 
sensationalist than Russia 1 or Channel One. A 
livestream of the channel can be viewed here. 


The easiest way to navigate NTV’s broadcast 
archive is by filtering its news page. From the 
“news” (hoboctu) page, scroll down to find a small 
segment on the right-hand part of the page 
showing the date. 

After selecting the desired date, any news 
segments that aired on that day will appear. When 
searching by key word, there is no way to search 
within a date range, but the results are ordered 
chronologically by default. You can also search 
through the daily news programs of NTV 
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(“Cerofli-m” and “1/lTorn aha”) using NTV's YouTube 
channel . 

Zvezda (TeneKaHan 3Be3fla) 

This is the Russian Defense Ministry's television 
network. As you might imagine, Zvezda airs 
programs that focus on the Russian military, 
including documentaries, news programs, and war 
movies. The news itself is very pro-Kremlin, and 
sometimes it publishes and airs unverified content 
from fringe websites, such as a story claiming that 
“thousands” of ISIS fighters arrived in Odessa in 
November 2015. A livestream of the channel can 
be viewed here. 


Zvezda’s YouTube channel with programming is 
available here (and the news-only channel is here ). 
Unfortunately, the search function on the Zvezda 
website to find specific news segments is 
cumbersome, but you can still navigate it with 
some effort. Go to their search page and type 
anything into the field in the top-right of the page 
(which will say “noncK”). This will bring up the 
search parameters. When searching for a 
particular date, you must choose the date you wish 


to search (the first one, after “ot”) and the day after 
the desired date (after “ao”). For example, if you 
wish to search for a news segment on December 
1 , 2014, the graphic below show the needed 
search parameters (along with a key word in 
Russian after “flo KOHTeKCTy”): 
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Alternatively, you may find success searching 
within Zvezda’s YouTube channel, avoiding the 
awkward search interface of its native website. 
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Life News (flaHCpHbtoc ) 


This is a privately-held television channel that has 
gained quite a reputation throughout the Ukrainian 
crisis as sensationalist and loose with facts. 
LifeNews— owned by Aram Gabrelyanov and said 
to be close with Russia's security services— prides 
itself at being the first to report news (often to the 
detriment of the truth andtaste). Since the cooling of 
the Ukrainian crisis, LifeNews has gone back to 
focusing on sensationalist stories and a higher 
dose of celebrity news than Russia 1 or Channel 
One. You can watch LifeNews’ livestream here . 

Of all of the television channels outlined in this 
guide, the broadcast archives of LifeNews are 
probably the most difficult to navigate. On the 
network's website, the search function only allows 
keyword search, without date parameters. You 
may have better luck searching through 
their YouTube channel , or trying focused searches 
through Google Video. For example, the search 
parameters below would search for all videos on 
LifeNews’ website that appeared on July 8, 2015, 
that also contain a keyword of choice: 


le site lifenews ru [keyword in Russian] 



All Images Videos News Shopping More •* Search tools 


Any duration Jul 8. 2015 ^ Any quality - All videos ~ Clear 


TV Rain (Hoxflb) 

Lastly, there is the independent, generally anti- 
Kremlin television network TV Rain, which moved 
to a subscription model after most cable carriers 
dropped it from coverage. The station often hosts 
pro-Western, anti-Kremlin guests, and occasionally 
grants airtime to pro-Kremlin figures and even 
some state officials. The network is said to have 
ties to Prime Minister Dmitry Medvedev's circle of 
influence. While the great majority of the channel’s 
programming is news, there are also 
some entertainment programs. A livestream can 
be viewed here (with a paid subscription). 

The channel’s archives are very easy to navigate 
using its archive here . For example, the search 
below for November (“Honbpb”) 10, 2014, 
yields 52 results, including 17 broadcast segments. 
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While access to some results may require 
a subscription, the great majority of the archived 
broadcast segments is accessible to everyone. 
You can also access the channel’s broadcasts on 

its YouTube channel . 


There are, of course, additional channels in Russia 
producing news coverage— such as REN TV (PEH 
TB), Channel 5 (IlnTbiM KaHan), and RBC (PEK)— 
but for most purposes, the channels outlined 
above will be more than sufficient for research, in 
conjunction with local television channels. Unlike 
American and some European media outlets, 
Russian television channels are often meticulous 
in publicly cataloging their broadcasts, sometimes 
going back over a decade. When conducting open- 
source research on nearly any event in Russia— a 
protest, natural disaster, crime, or any other 


topic— these archived broadcasts often provide 
incredible amounts of information, along with a 
window into the source that the vast majority of 
Russians rely on for their news. 
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How to Learn More About the Big 
Wigs and Public Officials in Russia 
and Ukraine 



There are numerous free and open information 
portals and databases available for researching 
individuals in Ukraine and Russia, whether you are 
investigating a public figure or a private individual. 
Information about ordinary Russians and 
Ukrainians can be hard to find on these databases, 
and sometimes the best way to locate data 
about such people is to look on social networks, as 
detailed in a previous installmentt o this guide. This 
eighth and final entry in RuNet Echo’s guide to 
doing open-source research on the RuNet looks at 


the portals and databases you can use to learn 
more about public figures and big-wig individuals, 
even if you have little or no knowledge of Russian 
or Ukrainian. 

Contents 


• Information on Organizations 

• Nomer.org 

• Declarations.com.ua 

• Missing Persons 
Information on Organizations 


A handful of websites provide information 
about organizations registered in Russia, including 
non-profits, LLCs, and other companies. The 
website SBIS.ru is one of the best available online 
resources, providing information about the 
individuals who hold leadership positions in these 
bodies and the owners of the organizations. SBIS 
relies on public data for each category of 
information. For example, the “Court records” 
section (CyAbi) derives its information from the 
Federal Arbitration Court of the Russian 
Federation. 
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To find out what the organizational affiliations of a 
specific individual are, search for that 
person's name (with patronymic, if possible) 
using Google with the search parameter of 
“site:sbis.ru,” restricting the results to this site. For 
example, when searching for the Russian 
basketball player Andrei Kirilenko, some of the 
results are clearly tied to him, including details 
about Kirilenko serving as the president of the 
Russian Basketball Federation. If you speak 
Russian, most of this information will be fairly 
clear, though a bit thick in bureaucratic language. If 
you do not speak Russian, the categories of 
information are detailed below. 
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Russian .National Nomtnclator of 
Businesses and Organisations 


BnaoeiibUH Owners and amount of Cyflw Court records 
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CBflMHHwe /tMua Connected organUations 
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HaaeMMOCTb Reliability 


Tenders and stale contracts 

Toprw m roocoHTpaKTu 


CTOMMOCTb Costs 


ysiaciaaaat 24 

Baarpan 14 


2 0 


0 0 
5 0 


Nomer.org 


The website Nomer.org holds a vast amount of 
information, but its results are often outdated, full 
of gaps, and somewhat unreliable. Regardless, if 
you are looking for information about an individual 
in Russia or Ukraine, you may find some success 
with this site. 

Nomer.org hosts a database with the addresses 
and dates of births of millions of Ukrainians, 
though much of this information is outdated and 
now incorrect. From the site http://nomer- 
org.net/allukraina/ . you can input information into the 
green fields to refine your search: 


Ben yxpaMHa - mvnenvi 

Phone Building Apt. 

Last name First name Patronymic number City Street number number Search 

Haft™ 


Testing this out, we can input the name of the 
Ukrainian president, Petro Alekseyevich 
Poroshenko. In this case, Nomer.org returns 
accurate information: 
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pontA. 




nOPOUUEHKO neTP A/IEKCEEBMM 


rpyujEBCbKoro 


From left to right, the information given is the 
person’s name, listed telephone number 
(Poroshenko does not have a listed number), date 
of birth, city of residence, street, street number, 
building number, and apartment number. 

Nomer.org also hosts a limited directory of Russian 
citizens, accessible by clicking the correct city or 
region on the website's main page . Also available is 
a limited directory of the license plates 
in Yekaterinburg . Novosibirsk . Rostov-on-Don , 
and Moscow . To find information in these vehicle 
directories, either search within the Nomer.org 
search engine, or use Google, by searching the 
person’s name, address, license plate number, or 
telephone number, adding the search parameters 
“site:nomer.org” or “site:nomer-org.net.” 

Declarations, com. ua 

A post-Maidan anti-corruption law requires all 
Ukrainian public officials— including legislators, 
judges, prosecutors, and others— to declare their 
incomes. However, the law does not specify that 


these income declarations must be published 
electronically (although a new law passed in March 
2016 will require officials to publish electronic 
declarations — Global Voices). That's where the 
Declarations.com.ua project, ran by journalist and 
anti-corruption activist Denis Bigus and his 
colleagues, comes in. Relying on crowdsourced 
efforts, the site provides electronic copies of 
officials’ paper income declarations. 

Unlike the sites previously described in this guide, 
Declarations.com.ua is written in Ukrainian, not 
Russian. It is nevertheless quite easy to navigate 
and has an intuitive interface. To search for an 
individual, enter their name (in Ukrainian, but the 
name may be recognized in Russian, as well) into 
the search bar, and choose their name if they 
come up in the auto-complete. Below, we'll 
try searching for Ukrainian President Petro 
Poroshenko: 


62 




fleicnapaijii 


roriOBHA PEflOHH P 03 UJVKVEM 0 flEKflAPALlll nro opoekt AHAniTMKA BlflKPMTMM API 


|^riopoujeHKO 

— nopoiueHKO O/ieKciM fleipoBHH 


nopomeHKC 


rieipo 0/ieKCiMOBMH 


This search produces three results: Poroshenko 
income declarations for 201 1 (when he was a 
presidential candidate), in 2013 (when he served in 
the parliament), and in 2014 (by which time he 
assumed the presidency). By clicking any of these 
records, we see his digitized income declaration, 
along with a scan of the original document 
(accessible via the red PDF button in the upper 
right). 
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While this project is ambitious and quite useful, 
there are obvious limitations: Ukrainians without 
official governmental roles will not be represented 
in this database, and the database is still 
incomplete, as there is still an ongoing effort to 
digitize a massive number of paper records. 

Missing Persons 

There are two noteworthy websites that allow you 
to search for missing persons in Russia and 
Ukraine. The first is a Russian national service 
called >Kfln Menm (Wait for Me), which can be 
found at at http://poisk.vid.ru/ . This service is a 
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partner to a television show with the same name, 
which features stories about searches for lost 
loved ones in Russia, Ukraine, Latvia, and other 
post-Soviet countries. 

To search for a person in the database, go to the 
HaMTM nenoBeKa (Find a Person) option, and then 
enter the necessary information into the search 
fields: 


HaiiTM ne/ioBeKa 


Houck no MOMepy mhbkm none* no flaHHWM mckomoho 

riOldCK no AaHHbIM MCKOMOro: 

Last name 
Hms First name 

Sex 

« non nioBOM o*my>k *>keh 

TOfl PO)KflEHMfl 1960 - 1964 Year of birth 

i COPTHPOBATb (g) no (paMWlHH O no flaTe 338BKM 

Sort by 1) last name 2) date of 
missing person claim 


Search 


nOMMCTMTb 


Ukraine's national missing-person database is also 
quite easy to use. From the search page , input the 
known information about the person you are 
searching for: 


npucMiue 


Cratb 

Date of birth 

flar* M»pouwe*«fl 


•*orow+» Male 
Female 


In'* 

no 6*Tb<oei 
Onwc soenhuHOert 
0CO6nMW npMKHVTM 
Perk* (ocraw MBC) 


* * * 


Region 


(from) 


]ea .[ 


Date of disappearance 

fUrra 3 


Description (hair, eye color...) 


Special signs (e.g. tattoos) 


If searching for open-source information about a 
particular Russian or Ukrainian individual, it's quite 
possible that you won't be able to find any useful 
information, aside from the information available on 
social networks . For most people, the social-network 
route is by far the most fruitful way to find 
information about their education, employment, 
and family history. However, depending on the 
person’s status or importance, it is quite likely that 
one of these special resources will provide more 
information, especially if the focus of the 
investigation concerns financial connections or 
corruption. 
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You've Read Our Open-Source 
Research Guidebook. Now Let's 
Use It. 



This article is part of a larger guidebook by RuNet 
Echo to help people learn how to conduct open- 
source research on the Russian Internet. Explore 
the complete guidebook at the special project page. 

RuNet Echo has now published eight installments 
in a guidebook on conducting open-source research 
on the Russian Internet. This ninth and final entry 
takes the tools and instructions we've been 
studying and applies them to a single case study: 
the wildfires that caused significant damage to the 
Siberian city of Chita in 2015. 


Contents 


• Finding Photographs and Videos 

• Finding Information From the Ground 

• The View From the Sky 

• Verifying Materials 
Finding Photographs and Videos 

One of the first logical places to look for footage of 
last year's wildfires in Siberia is Russian national 
television. You can search Russia's national and 
local TV broadcasts by date (in this instance, April 
12-16, 2015) on the various networks’ websites 
(as detailed in this guide) . 
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Figure 1 : Screen capture from a national news 
broadcast. 


CneuBbinycK Ha 7:30. Ot nomapoe b 3a6aHKa/ibCKOM Kpae nocrpafla/io 19 
Hace/ieHHbix nyHKTOB 



OmeHHafl cthxha b MUHyBLune cyrKH Hanecna cepbe3Hbin MaTepnanbHbiM ymep6 
>KHTenflM noMTu 20 HaceneHHbix nyHKTOB Kpaa. OroHb nepeKHAwsancp Ha >Knnb*e 
MaccMBw ot necHwx h naHAwa<t>THbix noxcapos, ecrb m cnyMaw B03HHKH0BeHMfl 
B03ropaHMM BHyTpM cen n nocenKOB. OxcuflaeTCfl, hto ceroAHfl wa noMomb b TyiueHMH 
noxopOB b KpaeByto cronnuy npw6yA€T caMoneT Be-200, a TaioKe we Menee 150 
cneunanncTOB Pocneccnyxc6bi n MMC. 


Figure 2: Screen capture from a local news 
broadcast. 


But this is just a starting point; you shouldn't settle 
for the footage aired by the media. In these 
circumstances, it's possible to find more 
information uploaded to the Internet by ordinary 
people on the ground. You can do this by 
searching Instagram and YouTube, among many 
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other websites and online services. (For 
conducting such searches on Russian social 
networks, see this RuNet Echo instruction guide .) By 

searching some of the hashtags used for this 
wildfire, such as #no>Kapbi20l 5 (“wildfires 2015”) 
and #Hma (“Chita,” a large city where there were 
wildfires), you can find a wealth of materials 
documenting the disaster. 



koctac 

Q Chita River 

30 likes 55w 

koctac B sepTe ropona cevinac ropwT nec 

#Mma #no*apw20i5 



Add a comment 


Figure 3: Photograph from Instagram user 
“koctac” of a wildfire near Chita, Russia. 


FOLLOW 
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Figure 4: Screen capture from a video posted by 
Instagram user “katya_greeg” of a wildfire, filmed 
from an apartment building in Chita, Russia. 


Video from the Chita wildfire, showing a car driving 
through the heavy smoke. 

Finding Information From the Ground 

Photographs and videos are great, but sometimes 
you need more detailed information from the 
witnesses and participants of an event from the 
ground. That’s where searching local 

communities and social networks comes in 
(see RuNet Echo's detailed guides on 
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these respective topics). If you do not speak 
Russian and are struggling to find the 
right communities, check out our guide for non- 
Russian speakers on conducting such research. 

Searching for local communities on the Russian 
social network VKontakte (VK) reveals numerous 
open groups, including “Overheard in Chita,” 
“Typical Chita,” “Chita.ru,” and “I’m Looking for 
You, Chita.” Of these, the first two are especially 
useful for searching public information. 



Figure 5: Google search for VK (BK) communities 
in Chita (Hi/iTa). 


In Chita, one of the Vkontakte groups with 
excellent local information about Chita is the 
Zabaykalsky Kray volunteer firefighters’ community 
page, where you'll find photographs, videos, 
eyewitness accounts of the wildfires, and other bits 
of useful information regarding the rescue workers’ 
organizing efforts. If you are researching or 
reporting on this topic, you could find dozens of 
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valuable contacts here, as many of the volunteer 
firefighters active in this group publicly share their 
phone numbers and email addresses. 
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Figure 6: Screenshot from the open Vk group 
“Volunteer Firefighters of the Zabaikalye.” 


The View From the Sky 


While we've reviewed several ways to find 
information produced on the ground, you 
might also want to examine the situation from 
above. As detailed in this guide , you can view 
territory chronologically using services like Google 
Earth. Looking at the Siberian areas affected by 
the wildfires, you can see the full extent of the 
damage. A comparison of a region outside of Chita 
from May 2014 and then April 2015, shortly after 
the end of the wildfires, shows some of the areas 
most affected by the blazes. 
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Verifying Materials 


Discovering information is terrific, but it's worthless 
without proper verification. Often times, open- 
source research requires more time in verification 
than discovery. It's important to find all information 
sources available for each event you're examining 
(as described in our juide on research conducted 
during the conflict in Ukraine). 

When vetting sources and potential witnesses, you 
can sometimes check information about their place 
of residence and business interests, as detailed 


in this guide . Lastly, when you find photographs and 
videos to use in a report, it's essential that you 
verify the location of the materials— otherwise, you 
might end up using phony data. This guide will walk 
you through the process of “geolocation” 
a verificating a photograph or video’s location). 

For example, this is how we would verify 
the photograph below , shared by “koctac,” posted 
during the 2015 Siberian wildfires: 

© | Irttfa^pam a search © o A 




koctac 


25 likes 
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Using the location mentioned in the caption above 
(Mira Street, Shira, Khakassia, Russia), we can 
see on Google Earth between July 2013 and April 
15, 2015 that the buildings were indeed destroyed 
after the April 2015 wildfires. 




Figure 1 1 : Screen capture from Google Earth of 
Mira Street in Shira, Khakassia, from April 15, 
2015. 


Upon closer inspection, other features in the 
photographs are also visible on Google Earth, 
including a white dormitory in the background, and 
the elevation of the hills. From all of this, we can 
confidently confirm the authenticity of the 
photograph. 


71 



Conducting open-source research on the Russian Internet is not all that different from 
carrying out such work online in other languages, but there are certainly aspects to the 
RuNet that it's vital to consider. We at RuNet Echo hope our guidebook can help you bridge 
some of these differences, and perhaps inspire you to do some digging on your own. 



